URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 41.216.225.250
Firstseen:2020-09-15 02:32:02 UTC
Total malware sites :13
Online malware sites :0 (0%)
Offline Malware sites :13 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-15 02:32:07 41.216.225.250ppp250-225-216-41.adsl.mtds.comNot listedAS36941 MTDS-AS- MAyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-12-28 01:37:05http://41.216.225.250:54788/bin.shOffline32-bit elf mips geenensp
2020-11-17 04:51:05http://41.216.225.250:58743/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-10-30 11:36:04http://41.216.225.250:50439/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-10-19 11:44:04http://41.216.225.250:51407/iOffline32-bit elf mips geenensp
2020-10-19 01:37:04http://41.216.225.250:51407/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-10-18 17:08:05http://41.216.225.250:51407/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2020-10-16 09:32:05http://41.216.225.250:40187/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-10-15 23:25:05http://41.216.225.250:40187/iOffline32-bit elf mips geenensp
2020-10-09 09:53:08http://41.216.225.250:37130/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-10-02 03:29:52http://41.216.225.250:44211/bin.shOffline32-bit elf mips geenensp
2020-09-26 22:52:04http://41.216.225.250:34653/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-09-25 03:28:06http://41.216.225.250:46144/iOffline32-bit elf mips geenensp
2020-09-15 02:32:07http://41.216.225.250:38028/iOffline32-bit elf mips geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-12-28 01:37:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-11-17 04:51:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-30 11:36:04c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2020-10-19 11:44:04b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-19 01:37:04b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-18 17:08:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-16 09:32:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-16 05:47:54577c669577d8c0376e43b4e734d10eec20615a9d77872ee38a5e61c9f6161cd8elf  
2020-10-16 02:42:102376445afd5129af9df0e42f10324bfebd648d507642dc8012f0aa6b5b19417belf  
2020-10-15 23:25:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-09 09:53:08b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-02 03:29:52b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-09-26 22:58:50c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2020-09-26 22:52:044400883acdd165da8aca227f8585c61d84122cda63a696ce912e5e25f964d0f3elf  
2020-09-25 03:28:06b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-09-15 02:32:06c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf