🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 64.89.160.197
Firstseen:2026-09-12 21:41:10 UTC
Total malware sites :16
Online malware sites :16 (100%)
Offline Malware sites :0 (0%)
Newest active malware site :2026-09-12 21:41:32 UTC
Oldest active malware site :2026-09-12 21:41:20 UTC (Age: 2 days, 5 hours, 22 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-09-12 21:41:20 64.89.160.197SBL692143AS36680 NETIFACELLC- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-09-12 21:41:32http://64.89.160.197/bot_client_mipsleOnlineDDoSAgent elf von
2026-09-12 21:41:32http://64.89.160.197/bot.b64Onlineelf von
2026-09-12 21:41:32http://64.89.160.197/bot_client_mipsOnlineDDoSAgent elf von
2026-09-12 21:41:32http://64.89.160.197/bot_client_mips64le.b64Onlineelf von
2026-09-12 21:41:32http://64.89.160.197/bot_client_mips.b64Onlineelf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_mips64OnlineDDoSAgent elf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_x86_64OnlineDDoSAgent elf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_armOnlineelf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_mips64leOnlineDDoSAgent elf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_arm64.b64Onlineelf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_arm.b64Onlineelf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_mipsle.b64Onlineelf von
2026-09-12 21:41:31http://64.89.160.197/bot_client_mips64.b64Onlineelf von
2026-09-12 21:41:29http://64.89.160.197/bot_client_arm64Onlineelf von
2026-09-12 21:41:28http://64.89.160.197/bot_client_amd64OnlineDDoSAgent elf von
2026-09-12 21:41:20http://64.89.160.197/bot_client_amd64.b64Onlineelf von

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-09-12 21:41:32c7b10bf1b0575abc7536574e7cf49c22e69e73e955fbd2873fcb8b28b31123fbtxt  
2026-09-12 21:41:32ea43a0140fe1b22f4988f4c513bbba7bec59d74ce506c420ec40d94a9335108ftxt  
2026-09-12 21:41:315bf715c1088adf216db2c1470d7e88d98cbcb25e00a4ce3513dacbaeb3be3953elf 
2026-09-12 21:41:3151a3af22bcd96f85e9158d29078850ea3f06742a8f2279c14526b97c713c2614elfDDoSAgent
2026-09-12 21:41:31123a95e782ecd5dd0cbd8a646882fdcdc24db90271be42e9da9d12ee498091e0txt  
2026-09-12 21:41:3136ef4cfd4e39d0090ae4473eba10ecb57a903c1900735ca64d41de11ef13acd4txt  
2026-09-12 21:41:31f4e6d0114599392890a3f75af835570f26252715550a398541988119a80647f1txt  
2026-09-12 21:41:319249bbd9c9ed47323d5e2b5fac181313f8e3333edb802817061aa5f37643868dtxt  
2026-09-12 21:41:3100f2bc3455fbb1aaa20a7c892357b3610fd2c099d408e9f8743e4d6627d1607celfDDoSAgent
2026-09-12 21:41:31cf462ef2a8acef6817c366187cc400c956c213bc37729a147233dfa68d217faftxt  
2026-09-12 21:41:31af40e385ad62e939c3bfa7f38884f49c69b04d35da630213aa22e2d2f82f92e4elfDDoSAgent
2026-09-12 21:41:304315615b2f9e700018303979a1b9d7ab6cdce3be5360bd3a29f0d7d3e349ffdcelfDDoSAgent
2026-09-12 21:41:3048caea2d6482c7d2b0b97a05bca70ab87a8d9347f3f888e9984ea5cbf99d82f3elfDDoSAgent
2026-09-12 21:41:28c979ad4c75cdf793fea7e600974d8bc2422260b31b5ed19e00cf6d9fea7ab552elf 
2026-09-12 21:41:27dc689e89652ccb9f54599e9403a8d610fe5603c3ec65a10249fb4ab78b79cb1eelfDDoSAgent
2026-09-12 21:41:190324a800c9e5d3e574c9da751ae0a66776199472e4a9e7c2d12293a50ffbeedatxt