🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 94.156.79.13
Firstseen:2024-07-01 10:51:05 UTC
Total malware sites :18
Online malware sites :0 (0%)
Offline Malware sites :18 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-07-01 10:51:11 94.156.79.13Not listedAS57043 HOSTKEY-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-07-21 10:11:06http://94.156.79.13/sarm6Offlineelf ua-wget abus3reports
2024-07-21 10:11:06http://94.156.79.13/sarm7Offlineelf ua-wget abus3reports
2024-07-21 10:08:04http://94.156.79.13/wget.shOfflineelf shellscript ua-wget abus3reports
2024-07-21 10:06:06http://94.156.79.13/sarm5Offlinemirai ext ua-wget Gandylyan1
2024-07-21 10:06:06http://94.156.79.13/smipsOfflinemirai ext ua-wget Gandylyan1
2024-07-21 10:05:06http://94.156.79.13/smpslOfflinemirai ext ua-wget Gandylyan1
2024-07-21 10:04:04http://94.156.79.13/sarmOfflinemirai ext ua-wget Gandylyan1
2024-07-03 05:23:22http://94.156.79.13/bot.x86_64Offlineelf NDA0E
2024-07-03 05:23:21http://94.156.79.13/bot.x86Offlineelf NDA0E
2024-07-03 05:23:18http://94.156.79.13/bot.arm7Offlineelf NDA0E
2024-07-03 05:23:16http://94.156.79.13/bot.armOfflineelf NDA0E
2024-07-03 05:23:14http://94.156.79.13/bot.arm6Offlineelf NDA0E
2024-07-03 05:23:13http://94.156.79.13/bot.arm5Offlineelf NDA0E
2024-07-03 05:23:09http://94.156.79.13/bot.mpslOfflineelf NDA0E
2024-07-03 05:23:09http://94.156.79.13/bot.m68kOfflineelf NDA0E
2024-07-03 05:23:08http://94.156.79.13/bot.ppcOfflineelf NDA0E
2024-07-03 05:23:08http://94.156.79.13/bot.sh4Offlineelf NDA0E
2024-07-01 10:51:11http://94.156.79.13/bot.mipsOffline32-bit elf moobot threatquery

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-07-22 05:19:551733dd012004b04a9211a085215d077337d319344153e04bbd5e5779b4392dacelf  
2024-07-22 04:54:36fa7de44ccd50710f9a6eba95fb57be21682f205a8fcfc600bfb487e2be529645elf  
2024-07-22 04:44:02a9e82f0f966c8d2dd293a6b3a93b5cdd2a57a39e1a72c36f904f42c4b67574c7elf  
2024-07-22 04:35:30b91167e4f4de8e5e873e8042b347e1d0de8d81b326bcfcd7019440377198def1elf  
2024-07-22 04:25:5300f4e2d89b586a4ae4c59fd2a08ffe632cdea8193fb1327881a84f72c1deef64elf  
2024-07-22 04:13:15a0980086ac234d50c13639167520563f20cc3e50c6f5808ac1cf8ad82b321981elf  
2024-07-21 10:11:04103d075cfdfccee672f42fd22205c4932e14f8d6ccc6c2d4e956b60df5f309bcelf  
2024-07-21 10:11:04ba8ce7f55a2ea72460f4eebd2b8eef50f73475db462300f16e1fe21f5d9312d8elf  
2024-07-21 10:08:048ddd9b0a5b42f7d6fd1a9a3d6157ba0a6476c06030d75dc5988d4cb127c74709sh  
2024-07-21 10:06:05737077150a9a74967e4e31734257a0be28165b1a75401af5c4eae26b38367fe7elf  
2024-07-21 10:06:04f44f925fd7dd91d5cc4d03ffd306b6fbc165532bb3cad2d451e41e0ae491679celf  
2024-07-21 10:05:06f0e4539aa4d1de9b63e57eeb8e83bab0f69b967062c2fc4e2d58536a52ecf3a4elf  
2024-07-21 10:04:04e616900556c5981ba87216cb1711e5e0ad88f9b3d6815e24f5d636886eff15cbelf  
2024-07-03 05:23:222e3e0127f012449dd62879bb5b9bca5c7ae7f706dd68c5b3c715a98a7a2484f8elf  
2024-07-03 05:23:21e82a22810f0d985b9a1c9e918d9817495b9d0bdda5f737a4d12b9d95ec3c1f7celf  
2024-07-03 05:23:185d01d948914950545e4c1b5f63e7c144edb58c21565ee4031f31924244d2657belf  
2024-07-03 05:23:16d88b4615d5979e150834cf0a5f19e416ed4ccbf9101bdaca219762278cd3672belf  
2024-07-03 05:23:138c951a092b45be6ca7df5d5cb70d7f126525aa4007095a36154ec459c4c22e5celf  
2024-07-03 05:23:1366b2733027282fe06d99a5d04d0cbb21c9ce9f51d1c871180e41a88f0384b446elf  
2024-07-03 05:23:0996a62228d09275cfbe4d7e1138dbcb046c57c302580a856e9f660b34e36c170belf  
2024-07-03 05:23:08421853c8985dd0a1a04f057756072e7791ffd3bb83e7fd9a165ab7c716f0a37eelf  
2024-07-03 05:23:089eaec75135e38cc2798375aa56cf88adbfd23df4d6de07853add957b56a2d03eelf  
2024-07-03 05:23:0825c2d868f41d444a18a0ca09b6d300e2e2559dbb39244cce183435fb1e244a9belf  
2024-07-01 10:51:119df16e009504f0524cd6b1d571094ecd269147e7f9c22210a5cafb93c0806260elfMooBot