URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	87.121.79.186
Firstseen:	2026-01-25 01:21:04 UTC
Total malware sites :	15
Online malware sites :	0 (0%)
Offline Malware sites :	15 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-01-25 01:21:06	87.121.79.186		SBL679671	AS213725 UK-03AI	GB	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-01-25 15:08:27	http://87.121.79.186/bins/cosmic.ppc440fp	Offline	elf ua-wget	abuse_ch
2026-01-25 15:08:27	http://87.121.79.186/bins/cosmic.i468	Offline	elf ua-wget	abuse_ch
2026-01-25 15:08:26	http://87.121.79.186/bins/cosmic.arm4	Offline	elf ua-wget	abuse_ch
2026-01-25 01:21:09	http://87.121.79.186/bins/cosmic.i686	Offline	elf geofenced mirai ua-wget USA x86	botnetkiller
2026-01-25 01:21:08	http://87.121.79.186/bins/cosmic.mpsl	Offline	elf geofenced mips mirai ua-wget USA	botnetkiller
2026-01-25 01:21:08	http://87.121.79.186/bins/cosmic.m68k	Offline	elf geofenced m68k mirai ua-wget USA	botnetkiller
2026-01-25 01:21:08	http://87.121.79.186/bins/cosmic.mips	Offline	elf geofenced mips mirai ua-wget USA	botnetkiller
2026-01-25 01:21:08	http://87.121.79.186/bins/cosmic.sh4	Offline	elf geofenced mirai SuperH ua-wget USA	botnetkiller
2026-01-25 01:21:08	http://87.121.79.186/bins/cosmic.ppc	Offline	elf geofenced mirai PowerPC ua-wget USA	botnetkiller
2026-01-25 01:21:08	http://87.121.79.186/bins/cosmic.x86_64	Offline	elf geofenced mirai ua-wget USA x86	botnetkiller
2026-01-25 01:21:07	http://87.121.79.186/bins/cosmic.x86	Offline	elf geofenced mirai ua-wget USA x86	botnetkiller
2026-01-25 01:21:07	http://87.121.79.186/sora.sh	Offline	mirai script	geenensp
2026-01-25 01:21:06	http://87.121.79.186/bins/cosmic.arm5	Offline	arm elf geofenced ua-wget USA	botnetkiller
2026-01-25 01:21:06	http://87.121.79.186/bins/cosmic.arm6	Offline	arm elf geofenced ua-wget USA	botnetkiller
2026-01-25 01:21:06	http://87.121.79.186/bins/cosmic.arm7	Offline	arm elf geofenced mirai ua-wget USA	botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2026-01-25 09:50:45	002a1ea3f88ec78aaf548ae69899882238f3c5294c31dfde7f2a3518f59dde8e	elf	Mirai
2026-01-25 06:25:31	627cc17bb1eaf7a33c33e94a3637606d40b0c75f0e059b9384d5f5a47d8c1ece	elf	Mirai
2026-01-25 01:21:09	0221e5cf99e2b0ec07ba30f1ccb321b6c44ee03812711d65df53ddbf4cf4d93f	elf	Mirai
2026-01-25 01:21:08	34d22d6992022fbfcf4a3674bed61559297920cc9f336578dfe14dc9d7e41ff1	elf	Mirai
2026-01-25 01:21:08	89bfe8dd59bd141f8ab28958806c2e30503af4d740a7c2de139b516d4bdc54ba	elf	Mirai
2026-01-25 01:21:08	4c55943b7d11335547cc20c16ef43839d09b473fbe968fed3222990307847c9c	elf	Mirai
2026-01-25 01:21:08	b6df21436b4f21f9a19fe39c34557086cc3454c4a832cc181d8f6d15d6fb93f0	elf	Mirai
2026-01-25 01:21:08	fb9192c081c86d098cde51ab9a29ce0e859ffc093c491281cbc223172b69c8bc	elf	Mirai
2026-01-25 01:21:07	cec670253dfc4bbff535a2ed3db34a1ab4768568b0a2f527efdf74b36c3b6983	sh	Mirai
2026-01-25 01:21:07	14146d836cfc09f3dc65648a4fd3a99b5e0913a5f14b625aa0a15bfe0cc9385b	elf	Mirai