URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 59.7.217.245
Firstseen:2025-12-07 20:02:05 UTC
Total malware sites :2
Online malware sites :1 (50%)
Offline Malware sites :1 (50%)
Newest active malware site :2025-12-07 20:02:13 UTC
Oldest active malware site :2025-12-07 20:02:13 UTC (Age: 23 days, 17 hours, 37 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-07 20:02:09 59.7.217.245Not listedAS4766 KIXS-AS-KR- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-12-07 20:02:13http://59.7.217.245:7070/app2Onlineelf geofenced ua-wget USA x86 botnetkiller
2025-12-07 20:02:09http://59.7.217.245:7070/c.shOfflinegeofenced sh ua-wget USA botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-12-30 23:31:18f343bbd888d5ced75816e5f1a0a9c01a6c4137c01fbcc87dd08a1cb6e88d9775elf 
2025-12-29 13:53:314c1998f345ed65d8dcc6a34ebb83365bdfe4e457bad2e301617fd1bec5bdf20celf 
2025-12-27 18:15:40c9724019722450b2d78032f094ddc7c532dd7d8104b4266488cbb3d7d7a332a3elf 
2025-12-09 01:00:51fb7407f99db4748c8e2362a696b7798234391eb1d8dc34d6a826b81ff0b777d1txt  
2025-12-07 20:02:13cc17c5a982a899986c292a41cdc0dfe75b7126b4833521a9b010722a382d11e8elf 
2025-12-07 20:02:0921f6d1a0bf86de1a12596bd776a99a8a610481f5f7b3387d08e2f9d032f2ac4ctxt