URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 103.69.96.221
Firstseen:2025-06-25 16:31:05 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-25 16:31:11 103.69.96.221Not listedAS135918 DVS-AS-VN- VNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-26 09:44:07http://103.69.96.221/debug.dbgOfflineelf mirai ext ua-wget NDA0E
2025-06-25 16:32:09http://103.69.96.221/wget.shOfflinemirai ext sh ua-wget xqtsmvjnxuurv
2025-06-25 16:31:15http://103.69.96.221/arm7Offlineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:14http://103.69.96.221/c.shOfflinemirai ext sh ua-wget xqtsmvjnxuurv
2025-06-25 16:31:12http://103.69.96.221/arm5Offlineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:12http://103.69.96.221/x86Offlineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:12http://103.69.96.221/mipsOfflineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:12http://103.69.96.221/arm6Offlineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:12http://103.69.96.221/sh4Offlineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:12http://103.69.96.221/spcOfflineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:11http://103.69.96.221/m68kOfflineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:11http://103.69.96.221/x86_64Offlineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:11http://103.69.96.221/mpslOfflineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:11http://103.69.96.221/armOfflineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:11http://103.69.96.221/ppcOfflineelf mirai ext ua-wget xqtsmvjnxuurv
2025-06-25 16:31:11http://103.69.96.221/w.shOfflinemirai ext sh ua-wget xqtsmvjnxuurv

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-06-26 09:44:0799d4785b6efc62c1475e017b58a2cc3e8e7f18026950ad0d80aa907846b1a39belfMirai
2025-06-25 16:32:0951adeb891f0e65bc4346a6c8fc1813d4131b83e4192cfd65c9e06a23271a6d5fshMirai
2025-06-25 16:31:1500eabaddd45ec2a5561dceba20946b21a4cb10e83265c18c7c817ea2cfeb3522elfMirai
2025-06-25 16:31:14aac2916d0dc593e4ac95de8adcda302b8c8aadfa5b4c2cc0c57d4d07dd2e64c6shMirai
2025-06-25 16:31:12de0567748097a8ba22759d2876355dfc2a46d4969b00047587a22f2c67ec0065elfMirai
2025-06-25 16:31:12856d04f62b520a17ebfb2d178600f7dbed8184cc361043ef2877365d1848b957elfMirai
2025-06-25 16:31:122d8e58cb12af842552eb436da561952d27cb1a88681e3b0ceb7b1550c75de064elfMirai
2025-06-25 16:31:122b69d8c7fd511e88c99ebaa889cf6f7fe4bf00beb8b6106e2b6ea73132128753elfMirai
2025-06-25 16:31:1288c36968a455f9d060c299a047e40b4f8185e2f7808e1eb56e8d55e7c30407c8elfMirai
2025-06-25 16:31:11804fa47f76786f0859d114609116ea76016af1c31180af810790902f99a4e79felfMirai
2025-06-25 16:31:11872d88be5ab68bd69614c99918a20bc165c3e55b1bbcfd4f75f2cf4bddf1b13celfMirai
2025-06-25 16:31:110df808e3fa32fe14334d6057de74b8dcc98a3947e8207d75faa2f7be67b06a0eelfMirai
2025-06-25 16:31:11a39d12ac29f27497f06651e771b7b6e0b4add4f6e69980677e47c50509374139elfMirai
2025-06-25 16:31:1151f125abc6b45027dd851115caf240cd3bc6ed1a72bcbc66cfd19bdc640b2f89elfMirai
2025-06-25 16:31:11b6c474bdc5b5aba2315e1663446e3b07b4efaf8816bfaeef2a85a5a4458c44c6shMirai
2025-06-25 16:31:1181cec79087ebb457756d9cfb5ffa8a822c6644f0e4aa04006d36bd7d16bae8eeelfMirai