URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 141.98.6.51
Firstseen:2025-11-22 22:43:05 UTC
Total malware sites :24
Online malware sites :17 (71%)
Offline Malware sites :7 (29%)
Newest active malware site :2025-11-23 10:36:15 UTC
Oldest active malware site :2025-11-22 22:43:16 UTC (Age: 1 day, 9 hours, 6 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-11-22 22:43:16 141.98.6.51Not listedAS213702 QWINS-LTD- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-11-23 10:36:15http://141.98.6.51/curl.shOnlinemirai ext sh ua-wget BlinkzSec
2025-11-23 10:35:16http://141.98.6.51/arm5Onlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:35:16http://141.98.6.51/ppcOnlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:35:16http://141.98.6.51/arcOnlineelf ua-wget BlinkzSec
2025-11-23 10:35:16http://141.98.6.51/wget.shOnlinemirai ext sh ua-wget BlinkzSec
2025-11-23 10:35:15http://141.98.6.51/ftpget.shOnlinesh ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/armOnlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/i686Onlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/sh4Onlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/umpslOnlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/mpslOnlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/umipsOnlineelf gafgyt ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/arm7Onlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/x86Onlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/mipsOnlineelf gafgyt ext ua-wget BlinkzSec
2025-11-23 10:34:18http://141.98.6.51/arm6Onlineelf mirai ext ua-wget BlinkzSec
2025-11-23 10:34:16http://141.98.6.51/dlr.ppcOfflineelf ua-wget BlinkzSec
2025-11-23 10:34:16http://141.98.6.51/dlr.armOfflineelf ua-wget BlinkzSec
2025-11-23 10:34:16http://141.98.6.51/dlr.arm5Offlineelf ua-wget BlinkzSec
2025-11-23 10:34:16http://141.98.6.51/dlr.sh4Offlineelf ua-wget BlinkzSec
2025-11-23 10:34:16http://141.98.6.51/dlr.mipsOfflineelf ua-wget BlinkzSec
2025-11-23 10:34:15http://141.98.6.51/dlr.arm7Offlineelf ua-wget BlinkzSec
2025-11-23 10:34:15http://141.98.6.51/dlr.mpslOfflineelf ua-wget BlinkzSec
2025-11-22 22:43:16http://141.98.6.51/tftp.shOnlinemirai ext opendir sh DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-11-23 15:32:5887c3fe9db86c4d2863a72613b957bae2bcfc20ff55153f45693f8bbd0708c0aftxt  
2025-11-23 10:36:15f4bce3038fad655a0d11ca7cf7700ce5d3374e3b7965ce7b52fc5f005514b544shMirai
2025-11-23 10:35:1649b78f52a03f7d2bc0e1d38eb4ab91e39e7f76418cb4064115ecff116de8c952elfMirai
2025-11-23 10:35:169ad5093aeff220adc4b2194596da4dd6edd0c2311c2f0361611602022493bf0belfMirai
2025-11-23 10:35:16ac8270387befdd1835141bdc8f8211929c0d3bc68ebf6371774e70c17a9e57b8elf 
2025-11-23 10:35:16f303eb057972dba34707064f9e29f9151ec3b3ec3cb4fe25864ebd7ca959dfb4shMirai
2025-11-23 10:34:189c28ab4b11e656bce1c6a98afb2f8e608149484c54e3393ec6fc3ecdab6cdaf4elfMirai
2025-11-23 10:34:18348821fb9bc381b4bcda43574446adf9041ce123183ee169dc943e74937e8352elfMirai
2025-11-23 10:34:18882a0ea7a6a427db4300014caad9e4a0ba6fba427f12dd91eff34fbc05231837elfMirai
2025-11-23 10:34:180f374086e4c202ad867cbe9a4b3aacd93139cbc175f71e7ab177b866d46e4b60elfMirai
2025-11-23 10:34:18191d712d104cd27cf4ebeef15e97e84865fcded1dee4af48bb1532c98859ea5belfGafgyt
2025-11-23 10:34:18307f4a7e196a88fdfcae5a971d64b9899428b390e78f595392c7624797cbc01delfMirai
2025-11-23 10:34:184057d50aba1aeda1f359ce366f336e5818faf223fdb81048595a0535e3b3155eelfMirai
2025-11-23 10:34:18a7dd41a5d6a6ab0b42016c5d476b3d714eac677a2828ccb95711044c94efa8cbelfMirai
2025-11-23 10:34:18ee559d55a51ca6b6e3997e4e211281240ecba60ff501c43fc1f3a4060bc618cfelfGafgyt
2025-11-23 10:34:18a1f6e0647a60f24c86c8c741affc97f551acb7040e71c4c56016819e28fb46fcelfMirai
2025-11-23 03:49:43486fa59627b9bfe5848011c3e618f63ddc9bcfec1469a201f3bccefe7d6ab7d3txt