URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 88.36.135.138
Firstseen:2020-09-28 15:35:03 UTC
Total malware sites :18
Online malware sites :0 (0%)
Offline Malware sites :18 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-28 15:35:06 88.36.135.138host-88-36-135-138.business.telecomitalia.itNot listedAS3269 ASN-IBSNAZ- ITyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-02-09 21:55:05http://88.36.135.138:35534/iOffline32-bit elf mips Mozi ext geenensp
2021-02-09 20:49:04http://88.36.135.138:35534/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-02-09 04:04:05http://88.36.135.138:35534/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-02-07 13:45:05http://88.36.135.138:55264/iOffline32-bit elf mips geenensp
2021-01-30 13:06:04http://88.36.135.138:36004/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-01-28 01:03:04http://88.36.135.138:36004/iOffline32-bit elf mips Mozi ext geenensp
2021-01-20 02:02:04http://88.36.135.138:58533/iOffline32-bit elf mips geenensp
2021-01-20 01:45:06http://88.36.135.138:58533/bin.shOffline32-bit elf mips geenensp
2021-01-18 21:51:04http://88.36.135.138:58533/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-01-12 21:04:08http://88.36.135.138:54281/Mozi.mOfflineMozi ext Gandylyan1
2020-12-27 17:15:09http://88.36.135.138:51903/iOffline32-bit elf mips geenensp
2020-12-27 16:55:06http://88.36.135.138:51903/bin.shOffline32-bit elf mips geenensp
2020-11-29 10:03:04http://88.36.135.138:32980/iOffline32-bit elf mips geenensp
2020-11-29 09:47:05http://88.36.135.138:32980/bin.shOffline32-bit elf mips geenensp
2020-10-29 11:40:06http://88.36.135.138:57682/bin.shOffline32-bit elf mips geenensp
2020-10-25 03:36:05http://88.36.135.138:57682/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-10-23 07:49:04http://88.36.135.138:57682/iOffline32-bit elf mips geenensp
2020-09-28 15:35:06http://88.36.135.138:59848/Mozi.mOfflineelf Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-02-09 21:55:054293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7elfMozi
2021-02-09 20:49:044293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7elfMozi
2021-02-09 04:04:054293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7elfMozi
2021-02-07 13:45:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2021-01-30 13:06:044293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7elfMozi
2021-01-28 01:03:044293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7elfMozi
2021-01-20 02:02:04b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2021-01-20 01:45:06b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2021-01-18 21:51:04b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2021-01-12 21:04:08b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-12-27 17:15:09b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-12-27 16:55:06b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-11-29 10:03:04b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-11-29 09:47:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-29 11:40:06b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-25 03:36:05b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-10-23 07:49:04b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605elf  
2020-09-28 15:35:062e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6elf