URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 89.39.3.61
Firstseen:2020-09-29 10:53:02 UTC
Total malware sites :15
Online malware sites :0 (0%)
Offline Malware sites :15 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-29 10:53:05 89.39.3.61Not listedAS9050 RTD- ROyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-10-31 13:03:06http://89.39.3.61:36962/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2022-10-30 23:46:04http://89.39.3.61:36962/bin.shOffline32-bit elf mips Mozi ext geenensp
2022-09-29 02:42:04http://89.39.3.61:58500/bin.shOffline32-bit elf mips Mozi ext geenensp
2022-09-22 00:00:06http://89.39.3.61:58500/iOffline32-bit elf mips Mozi ext geenensp
2022-09-16 09:04:06http://89.39.3.61:35013/iOffline32-bit elf mips Mozi ext geenensp
2022-09-16 08:45:04http://89.39.3.61:35013/bin.shOffline32-bit elf mips Mozi ext geenensp
2022-08-30 03:36:03http://89.39.3.61:56087/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2022-06-14 09:08:04http://89.39.3.61:38724/iOffline32-bit elf mips Mozi ext geenensp
2022-06-13 04:52:04http://89.39.3.61:38724/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2021-12-07 16:33:10http://89.39.3.61:44151/iOffline32-bit elf mips Mozi ext geenensp
2021-12-06 15:05:08http://89.39.3.61:44151/bin.shOffline32-bit elf mips Mozi ext geenensp
2020-10-04 14:38:05http://89.39.3.61:49988/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2020-09-29 18:49:05http://89.39.3.61:49988/iOffline32-bit elf mips geenensp
2020-09-29 18:16:05http://89.39.3.61:49988/bin.shOffline32-bit elf mips geenensp
2020-09-29 10:53:05http://89.39.3.61:49988/Mozi.mOfflineelf Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-10-31 13:03:05c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-10-30 23:46:04c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-09-29 02:42:04c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-09-24 12:27:5468baafbd298328ee017af7b7ec8c6e34cbf36ba7eb300ece56dd97b3565386e1elf  
2022-09-22 00:00:06c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-09-18 07:19:3862b0cc04b5b51d5435a35551116d99397a9a5ba22fe44e6cb8533e7a465bcd6celf  
2022-09-17 03:50:31e6966605dd2bc49df85045018c9f5e7d4a2221a493e7003e345330ed6bbe64f2elf  
2022-09-16 09:04:06c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-09-16 08:45:04c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-08-30 03:36:03c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-06-14 09:08:04c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2022-06-13 04:52:04c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2021-12-07 16:33:10c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2021-12-06 15:05:08c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2020-10-04 14:38:05c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2020-09-29 18:49:05c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2020-09-29 18:16:05c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf 
2020-09-29 10:53:05c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887elf