URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 183.81.33.194
Firstseen:2025-11-16 20:34:04 UTC
Total malware sites :23
Online malware sites :17 (74%)
Offline Malware sites :6 (26%)
Newest active malware site :2025-11-19 16:31:07 UTC
Oldest active malware site :2025-11-16 20:34:11 UTC (Age: 2 days, 20 hours, 46 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-11-16 20:34:11 183.81.33.194Not listedAS18403 FPT-AS-AP- VNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-11-19 16:31:07http://183.81.33.194/powerpcOnlineelf ua-wget abuse_ch
2025-11-19 02:07:05http://183.81.33.194/awget.shOnlinegeofenced mirai ext sh ua-wget USA botnetkiller
2025-11-19 02:07:05http://183.81.33.194/acurl.shOnlinegeofenced mirai ext sh ua-wget USA botnetkiller
2025-11-18 16:09:18http://183.81.33.194/lilin.shOnlinemirai ext sh BlinkzSec
2025-11-18 16:09:18http://183.81.33.194/totoOnlinemirai ext sh BlinkzSec
2025-11-18 16:09:17http://183.81.33.194/aarch64Onlineelf mirai ext BlinkzSec
2025-11-18 16:09:17http://183.81.33.194/arcOnlineelf mirai ext BlinkzSec
2025-11-18 16:09:16http://183.81.33.194/wget.shOnlinemirai ext sh BlinkzSec
2025-11-18 16:09:16http://183.81.33.194/dvr.shOnlinemirai ext sh BlinkzSec
2025-11-18 16:09:16http://183.81.33.194/curl.shOnlinemirai ext sh BlinkzSec
2025-11-18 16:09:06http://183.81.33.194/dlr.arm4Offline BlinkzSec
2025-11-18 16:09:06http://183.81.33.194/dlr.mipsOffline BlinkzSec
2025-11-18 16:09:06http://183.81.33.194/dlr.arm7Offline BlinkzSec
2025-11-18 16:09:06http://183.81.33.194/dlr.mpslOffline BlinkzSec
2025-11-18 16:09:06http://183.81.33.194/dlr.arm5Offline BlinkzSec
2025-11-17 21:01:15http://183.81.33.194/armOnline32-bit elf mirai ext Mozi ext threatquery
2025-11-17 06:48:15http://183.81.33.194/arm4Onlineelf mirai ext ua-wget abuse_ch
2025-11-16 22:11:08http://183.81.33.194/mipselOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-11-16 20:34:13http://183.81.33.194/mpslOnlineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-11-16 20:34:13http://183.81.33.194/massloadOnlinegeofenced mirai ext sh ua-wget USA botnetkiller
2025-11-16 20:34:13http://183.81.33.194/arm5Onlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-11-16 20:34:11http://183.81.33.194/arm7Onlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-11-16 20:34:11http://183.81.33.194/mipsOnlineelf geofenced mips mirai ext ua-wget USA botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-11-19 16:31:07102596c6c0ac0201bb8eff29e1e210540f192026927a79e23d27b11dc25e4b33elf 
2025-11-19 15:58:43f8a21f5a7a57b4e75d5ecee747787cb8b7c514f4bcb2cb829778c0ed1afc80besh 
2025-11-19 11:13:19adb29587593e95731ec9acef617a2efafe2b29ba38600c21c8a09c0e92d8bfccshMirai
2025-11-19 08:22:3709a730a356ccab9e58a6a3011e0482826d8eb2f24d1b9c76611e50626d0a657fshMirai
2025-11-18 16:09:18c96c1ef5cac6320f46648e89423bc4bff027f1ae6f4dc822bff95d8dd8f07d2fshMirai
2025-11-18 16:09:1823553f2094480a6da0d7d87abcb967558faa84f26a48890173b97735343e9979shMirai
2025-11-18 16:09:17bcfc9d2b50bf532f047d666f88c4fa2de9410b40d8a339c840cce3fb69037ec9elfMirai
2025-11-18 16:09:1606693d6a05d2458d13aa8de434f5651a933ca8ffc1eee7a7ce0e3fe3c087db54elfMirai
2025-11-18 16:09:16b0a010619bf8bca301b5495b68c860436ed6c34674349b128f49d50702c9b0f8shMirai
2025-11-18 16:09:16ad6c22f80043422adf00f0a7d647ba1f3fd906c5ee19d9b19812a923ca4b104dshMirai
2025-11-18 16:09:1683d23b1eae2e35e7e185c16d9c7457e7d211dcfae5ce7d002df123b97d5db169shMirai
2025-11-18 10:23:3708fe033056f2f363637df7eaa1395592cb81e9fe81cd47c0ebd4179dae842f31elfMirai
2025-11-17 22:48:591722e1c45b9505351948ded6293528b5baeeba06c892f13ba028e49fb0611797elfMirai
2025-11-17 22:20:1037630084dd10bbd25b42984dd63fbc1cd05714615a31f1b1dd90a86b8e7100d1elfMirai
2025-11-17 22:13:12ca4bd50228d92ac1266506b2ac7fb5636638bd6f3e8ae710fc373c41189ada26elfMirai
2025-11-17 21:44:301722e1c45b9505351948ded6293528b5baeeba06c892f13ba028e49fb0611797elfMirai
2025-11-17 21:39:1239ccf5403edb501d79b7d765ec915f3bf78840ecc9ae4ded56e205a539b33ff1elfMirai
2025-11-17 21:01:1439ccf5403edb501d79b7d765ec915f3bf78840ecc9ae4ded56e205a539b33ff1elfMirai
2025-11-17 09:44:04d25ff2751b74cc4adccb68f0c579f36750371038e3bc8458c6a06fa95e248974shMirai
2025-11-16 22:11:080c7f6fe49011a498b0d4d142ebeb174f9c12b9dbfa8e332b99018626acecad16elfMirai
2025-11-16 20:34:080c7f6fe49011a498b0d4d142ebeb174f9c12b9dbfa8e332b99018626acecad16elfMirai
2025-11-16 20:34:08c795a6a91fefa05abdccdd953e16563b5347af1517ff49293fe90e41d411c806shMirai
2025-11-16 20:34:08e93c857f90aefcabbda9c0565362d9ed7e28c18f746fad326932ab78402e3506elfMirai
2025-11-16 20:34:0861efa8b0514269485438cc0adaa5ab33a600ae25c1ab8122982639c10c16c827elfMirai
2025-11-16 20:34:08bc4ae249ce184d9de7f47e4f7d0e4f31d445e8bb992482638ca8d2de85d42cb6elfMirai