URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 47.104.144.93 |
|---|---|
| Firstseen: | 2025-09-03 05:00:04 UTC |
| Total malware sites : | 10 |
| Online malware sites : | 9 (90%) |
| Offline Malware sites : | 1 (10%) |
| Newest active malware site : | 2025-09-03 05:01:06 UTC |
| Oldest active malware site : | 2025-09-03 05:00:08 UTC (Age: 10 months, 29 days, 10 hours, 4 minutes) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-09-03 05:00:08 | 47.104.144.93 | Not listed | AS37963 ALIBABA-CN-NET | CN | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-09-03 05:01:06 | http://47.104.144.93:81/download-55.sh | Online | curl mirai | |
| 2025-09-03 05:00:21 | http://47.104.144.93:81/download-rocky.sh | Online | curl mirai | |
| 2025-09-03 05:00:20 | http://47.104.144.93:81/install_rocky.sh | Online | curl mirai | |
| 2025-09-03 05:00:08 | http://47.104.144.93:81/dnf_8.sh | Online | curl mirai | |
| 2025-09-03 05:00:08 | http://47.104.144.93:81/download-55_new.sh | Online | curl mirai | |
| 2025-09-03 05:00:08 | http://47.104.144.93:81/install.sh | Online | curl mirai | |
| 2025-09-03 05:00:08 | http://47.104.144.93:81/download-47_new.sh | Offline | curl mirai | |
| 2025-09-03 05:00:08 | http://47.104.144.93:81/install_new.sh | Online | curl mirai | |
| 2025-09-03 05:00:08 | http://47.104.144.93:81/installcallcenter_cento... | Online | curl mirai | |
| 2025-09-03 05:00:08 | http://47.104.144.93:81/download-115.sh | Online | curl mirai |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-09-03 05:01:06 | 7fd8efd14071e0df87da43018aca9575d9a4e7788e37ba4f699c169253b258d7 | sh | ||
| 2025-09-03 05:00:21 | 8553b4a53ce223e0ba8f202ad0bf361ee89b3b62a814ee48ae6284e4c53a8283 | sh | ||
| 2025-09-03 05:00:20 | 1d363cb0c3583ce95f8bb4fc93302b78690f32c37b93f27a9525a480567f0aa9 | sh | ||
| 2025-09-03 05:00:08 | 3fd2ec96d43db3f83a82f276bac0e4314df494bbb038548f1ca0e4ec5c260d13 | sh | ||
| 2025-09-03 05:00:08 | c0d8d0d31350af20d0982b9da9f8274c69b16a4b04b32b77dbfa9d96fac7e86c | sh | ||
| 2025-09-03 05:00:08 | df2ef99ef65b2b741311c2c50b3c74bfe1093c732b26dbec4ca1e4fd6341c1ff | sh | ||
| 2025-09-03 05:00:08 | e4427167f7926e7aa0011770cc262cbf1cf1c2e554c257231e20bac994e4fa94 | sh | ||
| 2025-09-03 05:00:07 | 20967c25fb7c96f231f2a0fbd578a0d7f85fa17583e1d667e28e40354e65b7f4 | sh | ||
| 2025-09-03 05:00:07 | 78d890fe84aa329b7622f06e998f107cc8bf7d4dba42473faa1a2a07b6abfd61 | sh | ||
| 2025-09-03 05:00:07 | f84926c25de1851b59d833b74f6f489c07565335bbb241563577426a374887f9 | sh |
CN