URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-04-27 11:36:02 | 104.247.166.220 | 220Ow1g79.guzel.net.tr | Not listed | AS42846 guzelhosting |  TR | yes |
| 2025-06-28 13:21:25 | 15.197.240.20 | acf3b736b777428f5.awsglobalaccelerator.com | Not listed | AS16509 AMAZON-02 |  US | no |
| 2023-07-26 12:01:58 | 104.247.167.3 | 31GQ2pa.guzel.net.tr | Not listed | AS42846 guzelhosting | TR | no |
| 2023-03-30 11:53:44 | 185.190.19.90 | Not listed | AS134094 SERVERFIELD-AS |  NL | no | |
| 2023-01-20 14:07:19 | 104.247.164.130 | 130we7doc.guzel.net.tr | Not listed | AS42846 guzelhosting | TR | no |
| 2022-11-22 11:39:53 | 104.247.162.67 | 67Z4JQ6y.guzel.net.tr | Not listed | AS42846 guzelhosting | TR | no |
| 2022-11-21 11:18:02 | 2.59.119.2 | server1.hostingdunyam.net | Not listed | AS212219 HostingDunyam | TR | no |
| 2022-10-27 23:37:25 | 80.253.246.193 | server3.hostingdunyam.net | Not listed | AS212219 HostingDunyam | TR | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2022-11-17 19:19:56 | https://istanbulyazilim.net/rrr/index.php?qbot.zip | Offline | BB06 iso Qakbot  qbot Quakbot SK16 TR zip |  Cryptolaemus1 |
| 2022-11-11 11:40:13 | http://istanbulyazilim.net/fh28fu490fiu42.kdfd | Offline | exe |  vxvault |
| 2022-11-11 11:27:12 | http://istanbulyazilim.net/1255321213.yutoiop | Offline | exe | vxvault |
| 2022-11-10 08:47:07 | http://istanbulyazilim.net/ofg7dfg312.wretg | Offline | exe LaplasClipper | vxvault |
| 2022-11-10 08:40:12 | http://istanbulyazilim.net/dmi1dfg7n.iujgy | Offline | CoinMiner exe | vxvault |
| 2022-11-10 07:19:15 | http://istanbulyazilim.net/f429f4uf84u.f2hf9842 | Offline |  abuse_ch | |
| 2022-10-27 23:37:45 | https://istanbulyazilim.net/si/qakbot.zip | Offline | BB04 iso PG1 Qakbot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-27 23:37:38 | https://istanbulyazilim.net/xi/qakbot.zip | Offline | BB04 iso PG1 Qakbot qbot Quakbot TR zip | Cryptolaemus1 |
| 2022-10-27 23:37:25 | https://istanbulyazilim.net/uqi/qakbot.zip | Offline | BB04 iso PG1 Qakbot qbot Quakbot TR zip | Cryptolaemus1 |
The table below shows recent payloads delivery by this host.