URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 88.249.70.76
Firstseen:2024-10-06 10:39:03 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-10-06 10:39:05 88.249.70.7688.249.70.76.static.ttnet.com.trNot listedAS9121 TTNet- TRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-03-30 13:58:09http://88.249.70.76:58474/iOffline32-bit elf mips Mozi ext geenensp
2026-03-30 13:31:15http://88.249.70.76:58474/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-10-23 15:01:15http://88.249.70.76:50466/Mozi.aOffline32-bit elf Mozi ext threatquery
2025-10-12 03:02:11http://88.249.70.76:50466/iOffline32-bit elf Mozi ext threatquery
2025-10-12 03:01:11http://88.249.70.76:50466/bin.shOffline32-bit elf Mozi ext threatquery
2025-10-11 21:01:10http://88.249.70.76:50466/Mozi.mOffline32-bit elf Mozi ext threatquery
2025-10-03 09:01:28http://88.249.70.76:57088/bin.shOffline32-bit elf Mozi ext threatquery
2025-10-03 09:01:16http://88.249.70.76:57088/iOffline32-bit elf Mozi ext threatquery
2025-10-01 09:01:12http://88.249.70.76:57088/Mozi.mOffline32-bit elf Mozi ext threatquery
2025-09-22 21:01:12http://88.249.70.76:55636/bin.shOffline32-bit elf Mozi ext threatquery
2025-09-22 21:01:08http://88.249.70.76:55636/iOffline32-bit elf Mozi ext threatquery
2025-09-19 15:01:26http://88.249.70.76:55636/Mozi.mOffline32-bit elf Mozi ext threatquery
2025-04-25 05:58:04http://88.249.70.76:44974/iOffline32-bit elf mips Mozi ext geenensp
2025-04-25 05:41:03http://88.249.70.76:44974/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-10-06 10:51:05http://88.249.70.76:33857/iOffline32-bit elf mips Mozi ext geenensp
2024-10-06 10:39:05http://88.249.70.76:33857/bin.shOffline32-bit elf mips Mozi ext geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-03-30 13:58:09f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2026-03-30 13:31:15f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-10-23 15:01:15f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-10-12 03:02:11f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-10-12 03:01:11f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-10-11 21:01:09f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-10-03 09:01:28f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-10-03 09:01:16f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-10-01 09:01:12f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-09-22 21:01:12f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-09-22 21:01:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-09-19 15:01:26f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-04-25 05:58:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-04-25 05:41:02f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-10-06 10:51:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-10-06 10:39:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf