🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 89.140.176.228
Firstseen:2024-04-11 12:12:25 UTC
Total malware sites :4
Online malware sites :1 (25%)
Offline Malware sites :3 (75%)
Newest active malware site :2024-12-29 18:57:21 UTC
Oldest active malware site :2024-12-29 18:57:21 UTC (Age: 1 year, 10 month, 20 days, 17 hours, 46 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-04-11 12:12:34 89.140.176.22889.140.176.228.static.user.ono.comNot listedAS6739 ONO-AS- ESyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-10-06 12:53:41http://89.140.176.228:40352/Mozi.mOfflineelf hajime NDA0E
2024-04-22 09:04:43http://89.140.176.228:40352/.iOfflineelf hajime abus3reports
2024-04-11 12:12:34http://89.140.176.228:40352/iOfflineelf hajime abus3reports

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-08-18 19:32:13d5aadfcde4a266619be66a0b06d156f644e151283856630e6cd849adcb51e032elf 
2025-07-13 17:05:3133918b83bcfc3fe7dc6951b5809edc3a1f0bfc15abed2ef83c2064cf38c5f3b8elf 
2024-12-29 18:57:21020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime
2024-11-15 16:29:23020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime
2024-06-14 15:35:400c8555271eb8e5ec0a17685fff0af8fa9c8ffc8b3a5e5b1affd1772db0d9e5f6elf 
2024-06-01 15:03:35c0b1ac2a4e9df27794b10c8738057ba5476357bd5129bee50a2a1ab9f8183853elf 
2024-06-01 14:25:37898e00110e699b1381509252bd0614c8ffe8e04c7692678bf3eeaecf131f8af0elfHajime
2024-06-01 14:08:4892123529233d7536dde32a64565ed9ddb4ae5be40bfaf42d71eccaec4eab3fc2elf 
2024-06-01 07:30:2420c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eebelf 
2024-05-31 16:03:599567d0b1bb9917fdc63a65081b27536f6dcbe9a96fcdf0ccc569a07eaf1db8afelf 
2024-04-22 09:04:42020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime
2024-04-16 11:57:589a0bd9cabd958815d3e48a9cc41fa37834f9a886d8ec90a6e0fd61e8d709b187elf 
2024-04-15 21:08:16785205b60d262a62efe8bc8623b23dd78031641453294bb0f668a24b58e018d6elf  
2024-04-14 18:10:17d8430372204682e98e75cdf589ab45e2f09960cd0aff5af741341671481b3656elf  
2024-04-14 17:58:589567d0b1bb9917fdc63a65081b27536f6dcbe9a96fcdf0ccc569a07eaf1db8afelf 
2024-04-14 17:32:090df042d54591672fa23878c4f1dc48a75f1ac98e117c6c66d75fdb1276e54860elf 
2024-04-14 17:19:231f48514510e82de6011f281ac4c134c3ee3bcf8f928ac14ffef4fca3ee0bdc59elf 
2024-04-14 16:13:32feacba94918d32a51ff751ae4b98e9ec5823aedd525ad283ed99653b3f23545aelf 
2024-04-14 15:52:4820c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eebelf 
2024-04-14 15:15:35810a146b624a47b1e9e977f147bb304f268dd35c104027a7e4f98288a11432b1elf 
2024-04-11 12:12:29020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime