URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 134.199.190.221 |
|---|---|
| Firstseen: | 2026-05-21 20:18:05 UTC |
| Total malware sites : | 3 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 3 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-05-21 20:18:07 | 134.199.190.221 | Not listed | AS14061 DIGITALOCEAN-ASN |  DE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-05-21 20:18:07 | http://134.199.190.221/hiddenbin/Space.arc | Offline | 134-199-190-221 mirai  ua-wget |  BlinkzSec |
| 2026-05-21 20:18:07 | http://134.199.190.221/1.sh | Offline | 134-199-190-221 mirai ua-wget | BlinkzSec |
| 2026-05-21 20:18:07 | http://134.199.190.221/hiddenbin/Space.arm7 | Offline | 134-199-190-221 mirai ua-wget | BlinkzSec |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-05-21 20:18:06 | c726fedb10d7a1c8f36ae15601497db81f8b81a04dac6de17b09db6056e8f132 | elf | Mirai | |
| 2026-05-21 20:18:06 | 1cf11039631b39d06400215e206a2d3d1f02d72a074914c785b923089772cf1c | sh | Mirai | |
| 2026-05-21 20:18:06 | e935f85993942729ef9159eacebb7c63c3f7f8d61e2e19479a14f0db1a1f40f6 | elf | Mirai |