URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 79.124.40.48
Firstseen:2024-04-27 12:13:04 UTC
Total malware sites :21
Online malware sites :0 (0%)
Offline Malware sites :21 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-04-27 12:13:08 79.124.40.48ip-40-48.4vendeta.comNot listedAS50360 TAMATIYA-AS- BGyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-01-14 06:01:08http://79.124.40.48/bins/c.shOfflinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.arm7Offlinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.arm5Offlinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.mpslOfflinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.m68kOfflinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.ppcOfflinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.mipsOfflinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.sh4Offlinemirai ext cesnet_certs
2025-01-12 05:01:07http://79.124.40.48/bins/res.arm6Offlinemirai ext cesnet_certs
2025-01-12 04:01:05http://79.124.40.48/8UsA.shOfflinemirai ext cesnet_certs
2025-01-11 10:40:08http://79.124.40.48/bins/res.x86Offline64-bit elf mirai ext x86-64 geenensp
2024-04-27 12:13:26http://79.124.40.48/la.bot.mipsOfflineelf mirai ext ClearlyNotB
2024-04-27 12:13:24http://79.124.40.48/la.bot.mipselOfflineelf ClearlyNotB
2024-04-27 12:13:22http://79.124.40.48/la.bot.m68kOfflineelf ClearlyNotB
2024-04-27 12:13:15http://79.124.40.48/la.bot.powerpcOfflineelf ClearlyNotB
2024-04-27 12:13:11http://79.124.40.48/la.bot.sh4Offlineelf ClearlyNotB
2024-04-27 12:13:09http://79.124.40.48/la.bot.arm6Offlineelf mirai ext ClearlyNotB
2024-04-27 12:13:08http://79.124.40.48/la.bot.sparcOfflineelf mirai ext ClearlyNotB
2024-04-27 12:13:08http://79.124.40.48/la.bot.arm7Offlineelf mirai ext ClearlyNotB
2024-04-27 12:13:08http://79.124.40.48/la.bot.armOfflineelf mirai ext ClearlyNotB
2024-04-27 12:13:08http://79.124.40.48/la.bot.arm5Offlineelf mirai ext ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-01-14 06:01:0856fb1da47554266f943d515380c7d11392e8e2906dbb5b54ca94c4c9100e585dshMirai
2025-01-12 05:01:077e880c604d3e5abc2e09db5c6b5ede560cd4a8dfb11ee71bc74b85840db84d9eelfMirai
2025-01-12 05:01:07fc3c632140a17bf692aeeb08015c7432252a815bf17496488be960ac7b6653acelfMirai
2025-01-12 05:01:07962cd150330c8d8816b0c8d91ad789acd89863b05d6fe5221a84eccd5a253f18elfMirai
2025-01-12 05:01:07578216b2c3ac094ecd71d8096584c9d7d2267e8c342b727e35cd23243ea9776aelfMirai
2025-01-12 05:01:07b8823a97f1bf36d311fc7f1aca9633bece519c3b03a5ffb4023455dadb7e1dd8elfMirai
2025-01-12 05:01:072250834e849e9a361e45ae2b530c01464eb8f363b1829eb54b967b479624c19celfMirai
2025-01-12 05:01:07cc9f1a2cdc53de1e6a057ef957ebefb5ef8e4a2e2e95c888ad1d0f0e297bdcb9elfMirai
2025-01-12 05:01:07a37d4acd105431083e2f065ed367266dfc190a08833efd30656168a61f4e091delfMirai
2025-01-12 04:01:058fc45c097d32f6f2c67946cc7ea8c4613ec8dc7810519c6658386030987bbdc4shMirai
2025-01-11 21:00:1917e34c256e91b013d5b3ddc49e8011d6c4ad5ca053df27997dd4a2aa29a8abf9elfMirai
2025-01-11 10:40:083839cad203fdbb96de20400d274751bee1b17970f5109554b4a778b79c472ae2elfMirai
2024-04-27 12:13:2658b04f7319bf09b08d35b0fd330a4b4e55a29c9a00363805fb6bc8f22e2a6928elfMirai
2024-04-27 12:13:23aabd623a7c2591214a6988d852203d3087f78fad12da229881725fd1e0e62ae8elf  
2024-04-27 12:13:22269dc0615b1d6796765403bde981972df2e29fc4106514e53191483d86f13ef2elf  
2024-04-27 12:13:158140a8f075d035a701a2fa71eba17f0e93f7013cb48f9f78bb4c09e03735e54delf  
2024-04-27 12:13:104c1fd9d5b4edf85d76594f7348586e4f81fcd1ae22226346d1d26d1a48fb34a4elf  
2024-04-27 12:13:089e443f6bc10282df89302cd1850d47e99dd3151530ae399759564331eceb4e57elfMirai
2024-04-27 12:13:089e443f6bc10282df89302cd1850d47e99dd3151530ae399759564331eceb4e57elfMirai
2024-04-27 12:13:08b4028abad876c9cfc0034da51c5dac320300c6922472f546f2c457424628e2bdelfMirai
2024-04-27 12:13:0798703c63301e342f950591785ce029c7726dbc1f81ce8497eed33eefe0d6be6felfMirai
2024-04-27 12:13:07d24c34d597b58fc78e7fa4c5cd3f884f8fd18d70090572a74c32ae75dfc6080aelfMirai