URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 79.110.62.213
Firstseen:2022-07-21 14:27:03 UTC
Total malware sites :21
Online malware sites :0 (0%)
Offline Malware sites :21 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-07-21 14:27:04 79.110.62.213Not listedAS213893 IPTR-AS- BGyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-09-26 23:43:03http://79.110.62.213/sh4Offlineddos mirai ext Gandylyan1
2022-09-26 06:22:04http://79.110.62.213/mipsOffline32 elf mips mirai ext zbetcheckin
2022-09-26 06:21:02http://79.110.62.213/mpslOffline32 elf mips mirai ext zbetcheckin
2022-09-26 05:25:05http://79.110.62.213/lol.shOffline script geenensp
2022-08-29 07:27:04http://79.110.62.213/UUY.exeOfflineexe GuLoader ext abuse_ch
2022-08-16 05:19:04http://79.110.62.213/BEW.exeOffline32 AgentTesla ext exe zbetcheckin
2022-08-15 19:39:04http://79.110.62.213/XSW.exeOffline32 exe RemcosRAT ext zbetcheckin
2022-08-15 15:18:17http://79.110.62.213/UDF.exeOfflineAgentTesla ext exe SnakeKeylogger ext abuse_ch
2022-08-15 13:55:33http://79.110.62.213/ESA.exeOfflineexe abuse_ch
2022-08-15 13:10:05http://79.110.62.213/EWE.exeOfflineAgentTesla ext exe abuse_ch
2022-08-09 16:46:04http://79.110.62.213/HXX.exeOfflineexe rat RemcosRAT ext abuse_ch
2022-08-02 16:03:04http://79.110.62.213/JBB.exeOffline32 AgentTesla ext exe zbetcheckin
2022-08-02 14:53:04http://79.110.62.213/WZZ.exeOfflineAgentTesla ext exe abuse_ch
2022-07-31 08:22:04http://79.110.62.213/ABR.exeOffline32 exe RemcosRAT ext zbetcheckin
2022-07-30 15:48:05http://79.110.62.213/MJR.exeOffline32 exe RemcosRAT ext zbetcheckin
2022-07-30 14:17:05http://79.110.62.213/KRW.exeOfflineexe rat RemcosRAT ext abuse_ch
2022-07-28 01:30:05http://79.110.62.213/EDZ.exeOffline32 AgentTesla ext exe zbetcheckin
2022-07-27 08:06:06http://79.110.62.213/EDS.exeOfflineAgentTesla ext exe abuse_ch
2022-07-22 13:54:13http://79.110.62.213/KVD.exeOffline32 exe RemcosRAT ext zbetcheckin
2022-07-21 16:12:04http://79.110.62.213/HEW.exeOffline32 exe RemcosRAT ext zbetcheckin
2022-07-21 14:27:04http://79.110.62.213/HAA.exeOfflineremcos ext RemcosRAT ext James_inthe_box

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-09-26 23:43:036c6652a41d9d120335700fdd8afcfebd70566dc61c3f86599e84f5a4df1c5789elfMirai
2022-09-26 06:22:0461888475d09ec079d7e1a46e479e11acb2ab3cbc2b1d5ed1770a31a1e9d5fda2elfMirai
2022-09-26 06:21:02d668a0e6ef1fcf871d749c561b566c90ceff28bd33bce0538487a63810a9b6e7elfMirai
2022-09-26 05:25:0572fd707ab23a79a294aa25473f12a8517da3bc17540eb9ccd87b2f0a3f1cea11unknown  
2022-08-30 12:41:0335dad72daed10eaaf56cfc6500048a1753a7a3356a6fc6c209ce3e3426ce47ddexe  
2022-08-29 07:27:046b255c5ed25b5f0366e7ea587870c6b6bbdd190607e94dc5ab89569ff2a88268exeGuLoader
2022-08-16 05:19:049ac02329516d069462d204fc014495b344e89da33c175cf18f8c92e637727ec9exeAgentTesla
2022-08-16 03:38:388e1e8edd5d42729a71911b7306aa30ac9a0be827496a2531d88ccfcdc8c2e268exeAgentTesla
2022-08-15 19:39:043639a796055969929b98a8a34fde77d9a0f79242ec6f012fea2dc14a98752a32exeRemcosRAT
2022-08-15 15:18:179689865dc0dbb9737c751b2463c615b18a68e61cc390ef3db985d1b09692458dexeAgentTesla
2022-08-15 13:10:0516672f1c0e48353306afe5dfdf6ec167ad3c786647404201b58847330893f7a5exeAgentTesla
2022-08-09 16:46:048a791c71f76f530179c8e957f5b6235fb573a9ee35a1dabfca368e62f7bba29eexeRemcosRAT
2022-08-02 16:03:045e90024a5b064f542afb1c8f9a341bcaa5c9811c24289805e01258cd323be5aaexeAgentTesla
2022-08-02 14:53:048b8a98eb8e8e8f5866811d7dc096fe7010239a2b789c830054814733ef9c3ce9exeAgentTesla
2022-07-31 16:12:192b305f1f4fa4f5ebe3b32ba17036b1b28febbcfecda7266a39c8d0aa21c12313exeRemcosRAT
2022-07-31 08:22:0436ee4cc36b92868bf1c674cacd2cf48eaf5b0fc29fba0e1e9dc13aa920b7ee32exeRemcosRAT
2022-07-30 15:48:0543ee9abd28c74e30fb9f976a611937d082ac0c1772f620e90087f038a406c89cexeRemcosRAT
2022-07-30 14:17:05fd01d960ca2725e756f9e852045ab8a1d971c8b5881c0883d87f73a8278f79d4exeRemcosRAT
2022-07-28 01:30:0578e0bb0a942ae8e480880b7cf4c0da03eb2c17fc203139b2b1658045d0ba435cexeAgentTesla
2022-07-27 08:06:05ad697153ae41a6e05044f862f1b93adbc0e125ca02e0de1af7e6c089a84cee8bexeAgentTesla
2022-07-22 13:54:12346a4ca2e508923bcf0e4c0d73a2ee06d91bd436b8db4981ab9ecb16e6f5110dexeRemcosRAT
2022-07-21 16:12:0493c44acd51b11807883d39e0a7ca13a178f0c69e9b7f20e90245c5973c937db0exeRemcosRAT
2022-07-21 14:27:04e3ad614d9a134b20b9efe02f5029d93c65ddc13322858d87c6ca3751b857413fexeRemcosRAT