URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	takibotnet.duckdns.org
Domain registrar:	Gandi
Domain registration date:	2013-04-12 19:58:56 UTC
Abuse complaint sent?:	Yes (2025-05-06 12:55:01 UTC to support{at}duckdns[dot]org)
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2025-05-06 12:54:07 UTC
Total malware sites :	26
Online malware sites :	0 (0%)
Offline Malware sites :	26 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2025-05-07 19:43:52	192.169.69.26	sinkhole.hyas.com	Not listed	AS27323 SERVERSTADIUM	US	yes
2025-05-06 12:54:29	62.171.138.173	vmi2570217.contaboserver.net	Not listed	AS51167 CONTABO	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2025-05-06 18:29:12	http://takibotnet.duckdns.org/x86_64	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:10	http://takibotnet.duckdns.org/mips	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:10	http://takibotnet.duckdns.org/arm5	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:10	http://takibotnet.duckdns.org/arm7	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:09	http://takibotnet.duckdns.org/mpsl	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:09	http://takibotnet.duckdns.org/sh4	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:09	http://takibotnet.duckdns.org/arm6	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:09	http://takibotnet.duckdns.org/x86	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:09	http://takibotnet.duckdns.org/ppc	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:09	http://takibotnet.duckdns.org/m68k	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:09	http://takibotnet.duckdns.org/arm	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 18:29:08	http://takibotnet.duckdns.org/spc	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:34	http://takibotnet.duckdns.org/c.sh	Offline	botnetdomain censys sh ua-wget	NDA0E
2025-05-06 12:54:33	http://takibotnet.duckdns.org/main_arm5	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:31	http://takibotnet.duckdns.org/w.sh	Offline	botnetdomain censys sh ua-wget	NDA0E
2025-05-06 12:54:31	http://takibotnet.duckdns.org/main_mips	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:31	http://takibotnet.duckdns.org/main_x86	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_arm7	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_ppc	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_sh4	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_m68k	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_x86_64	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_arm	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/wget.sh	Offline	botnetdomain censys sh ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_arm6	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E
2025-05-06 12:54:29	http://takibotnet.duckdns.org/main_mpsl	Offline	botnetdomain censys elf mirai moobot ua-wget	NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2025-05-06 18:29:10	30f418e23ca35c6649f4d9e9977b60c31d64b1fd81c1ed6e09c93e75844a2599	elf		Mirai
2025-05-06 18:29:10	d4c2fc4005d721d0395c7bfaee8090232086fecf15effad8da5b9ae2fb9806de	elf		Mirai
2025-05-06 18:29:10	b3b208209212a4bc0600bf572761716973943dd1779c38388825ac36f496d0b5	elf		Mirai
2025-05-06 18:29:09	8e5fc67a184ff670e7cb9f9bc12f88e4b9918d165219dab4bd719928e2bec22d	elf		Mirai
2025-05-06 18:29:09	770f24708a58dbc83b9df350fe59f6e438ea8c5d0f2740ec963e66ec12424ce3	elf		Mirai
2025-05-06 18:29:09	18bf06f751ab559b042002953e7f07be2a0aacc0eec9b1701557dc960c77c69c	elf		Mirai
2025-05-06 18:29:09	02de6bde366337f43bf8af634aaa85db4a647513ced4a41934d7ca79943f9652	elf		Mirai
2025-05-06 18:29:09	51a78beaa7e2421d6da1801dc93057d65ed5c852ac9fe7a405528996ea863dc5	elf		Mirai
2025-05-06 18:29:09	d4dd6ee4406fa10637cb302eccaf82959120b6c32b80c1bada7e7b2160968964	elf		Mirai
2025-05-06 18:29:09	7f4d17281e0a1ee5d8eb89bf8d0c96870424768518c36048eaf64576f7239ba1	elf		Mirai
2025-05-06 18:29:09	1122a4373d44d5d8f070006a12c5541c3e5dcd870471fb254d7f3349ff85fac0	elf		Mirai
2025-05-06 12:54:29	03c2aa088740fce2c320006fa8d830b3bb03b8db558b9f2461da9bd56393bce2	elf		Mirai
2025-05-06 12:54:29	279f677d775f627d6f1f38e7a789ef1f5a37e51d1392aa3d55204dc796aa1bbe	sh
2025-05-06 12:54:29	a521888025fd1f3e4c51d951a3891152f7713e21017770293197a644f50b67bd	elf		Mirai
2025-05-06 12:54:29	933ec42a0288b33fb552db33f80901a5bccbe098d914d3f5ea55cc9e3347867d	sh
2025-05-06 12:54:29	708a954ee8a306c0e5d8de8548b7e35c78ef920fe373b4f2d713c6a3284ccb34	elf		Mirai
2025-05-06 12:54:29	5ee97ea9ac8b8c023837ee8f508641ead5f07f8a9b6c7de3bd9d5b6737868afb	elf		Mirai
2025-05-06 12:54:29	dc1f2f203ea360b0b0cda9956fa5ba71910d3fbcf88dbeb1c039b9edfed934dc	elf		Mirai
2025-05-06 12:54:29	4a9b86f8d93f6e6a0e2e28ac0b1e4c71b5ab7da900c34bc176a72620d46e383e	elf		Mirai
2025-05-06 12:54:29	3588af8c6be28fa5b8cd5411ef59212fbf74f88065afaf9ac9ab910b19f94f36	elf		Mirai
2025-05-06 12:54:29	9d577a801346c1e13a5e1895567200f4ab96893c54808872022965d416ab2593	elf		Mirai
2025-05-06 12:54:29	dc2849fbf4c2c439de04aeab253e7bb464f395c1b0e3b551a3d5ab4644d0ca63	elf		Mirai
2025-05-06 12:54:29	87a83d5b2913d7aeba83998cdaa86b65c96bbdccb9039973aaa97c78645667df	sh
2025-05-06 12:54:29	eca65d1f1d602784e04c35e714f490602a18b093b680f4844fbf6e337d9d3bd6	elf		Mirai
2025-05-06 12:54:29	fcfaa2ffeefedf4f678b8a16d7476ea1bef878ba6518ae5a016490bd9c885517	elf		Mirai