URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-12-28 12:22:31	61.2.214.132	static.ftth.plg.61.2.214.132.bsnl.in	Not listed	AS9829 BSNL-NIB	IN	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-02-01 17:05:57	http://61.2.214.132:52143/Mozi.m	Offline	elf mirai Mozi	Gandylyan1
2020-01-23 14:04:55	http://61.2.214.132:43585/Mozi.m	Offline	elf mirai Mozi	Gandylyan1
2020-01-07 07:24:45	http://61.2.214.132:34902/Mozi.m	Offline	elf	Gandylyan1
2020-01-06 13:03:58	http://61.2.214.132:47871/Mozi.m	Offline	elf mirai	Gandylyan1
2020-01-01 21:21:26	http://61.2.214.132:53191/Mozi.m	Offline	elf mirai	Gandylyan1
2019-12-28 12:22:31	http://61.2.214.132:48245/Mozi.m	Offline	elf	Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-02-01 17:05:57	e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0	elf		Mirai
2020-01-23 14:04:55	e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0	elf		Mirai
2020-01-06 13:03:58	e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0	elf		Mirai
2020-01-01 21:21:26	e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0	elf		Mirai