URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 188.149.206.91
Firstseen:2025-09-27 02:47:04 UTC
Total malware sites :7
Online malware sites :2 (29%)
Offline Malware sites :5 (71%)
Newest active malware site :2026-05-14 04:21:07 UTC
Oldest active malware site :2026-05-12 06:53:07 UTC (Age: 16 days, 3 hours, 56 minutes)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-09-27 02:47:09 188.149.206.91c188-149-206-91.bredband.tele2.seNot listedAS1257 SWIPNET- SEyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-05-14 04:21:07http://188.149.206.91:59551/bin.shOnline GAYINT_DOT_ORG
2026-05-12 06:53:07http://188.149.206.91:59551/iOnline32-bit elf mips Mozi ext geenensp
2025-12-18 07:41:12http://188.149.206.91:48117/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-12-08 09:04:08http://188.149.206.91:48117/iOffline32-bit elf Mozi ext threatquery
2025-12-03 08:55:17http://188.149.206.91:52632/iOffline32-bit elf mips Mozi ext geenensp
2025-09-27 03:14:16http://188.149.206.91:53032/iOffline32-bit elf mips Mozi ext geenensp
2025-09-27 02:47:09http://188.149.206.91:53032/bin.shOffline32-bit elf mips Mozi ext geenensp