URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 196.251.80.67
Firstseen:2025-07-12 09:26:04 UTC
Total malware sites :20
Online malware sites :0 (0%)
Offline Malware sites :20 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-09-09 08:26:19http://196.251.80.67/bins/sora.armOfflineelf mirai ext tolisec
2025-09-09 08:26:19http://196.251.80.67/bins/sora.arm6Offlineelf mirai ext tolisec
2025-09-09 08:26:19http://196.251.80.67/bins/sora.mipsOfflineelf mirai ext tolisec
2025-09-09 08:26:19http://196.251.80.67/bins/sora.m68kOfflineelf mirai ext tolisec
2025-09-09 08:26:19http://196.251.80.67/bins/sora.ppcOfflineelf mirai ext tolisec
2025-09-09 08:26:19http://196.251.80.67/bins/sora.sh4Offlineelf mirai ext tolisec
2025-09-09 08:26:19http://196.251.80.67/bins/sora.x86Offlineelf mirai ext tolisec
2025-09-09 08:25:25http://196.251.80.67/bins/sora.mpslOfflineelf mirai ext tolisec
2025-09-09 08:25:20http://196.251.80.67/bins/sora.spcOfflineelf mirai ext tolisec
2025-07-12 09:26:34http://196.251.80.67/mipsOfflineelf mirai ext ua-wget ClearlyNotB
2025-07-12 09:26:34http://196.251.80.67/sparcOfflineelf ua-wget ClearlyNotB
2025-07-12 09:26:34http://196.251.80.67/armv6lOfflineelf mirai ext ua-wget ClearlyNotB
2025-07-12 09:26:12http://196.251.80.67/armv5lOfflineelf gafgyt ext ua-wget ClearlyNotB
2025-07-12 09:26:11http://196.251.80.67/i686Offlineelf mirai ext ua-wget ClearlyNotB
2025-07-12 09:26:11http://196.251.80.67/i586Offlineelf mirai ext ua-wget ClearlyNotB
2025-07-12 09:26:11http://196.251.80.67/x86Offlineelf mirai ext ua-wget ClearlyNotB
2025-07-12 09:26:11http://196.251.80.67/armv4lOfflineelf gafgyt ext ua-wget ClearlyNotB
2025-07-12 09:26:11http://196.251.80.67/m68kOfflineelf mirai ext ua-wget ClearlyNotB
2025-07-12 09:26:11http://196.251.80.67/sh4Offlineelf mirai ext ua-wget ClearlyNotB
2025-07-12 09:26:11http://196.251.80.67/mipselOfflineelf mirai ext ua-wget ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-09-09 08:45:4653048cfcddb2d7a918d116ca6c5b044703969f9ba99adf27ae52d7ce7145418aelfMirai
2025-09-09 08:45:36cb3fd2a9854bbb323f7ad8f1a613ef1b57896f2ff23fb0ddafea50f7f55f01c9elfMirai
2025-09-09 08:45:08ae8ad11c75d96d97eaaa20a4030b783ecb1151e4b37405ee7c93e014f81815eeelfMirai
2025-09-09 08:44:485606ebafde5da4b6cb90dc40b9814ab518d3f2adda9c2ca9a8accc8fdc119f7aelfMirai
2025-09-09 08:44:229fc28e92e529eca76354873b50a90aef54dd06f59cfe4913acbd8b7b82fb486felfMirai
2025-09-09 08:44:118608f5f2e59279a2842048907061df562f4f5f8256d818302072511957d75652elfMirai
2025-09-09 08:42:49ab5426f39301aa2eaf058ec14470ba8bc8f66f5515187ba7803d59ef48bdf790elfMirai
2025-09-09 08:41:16d01d77dee0f2799207a826659ab132e6b77dceecf3702ab6becc4200e3bffe8felfMirai
2025-09-09 08:25:25a24c5f13a352f148810d81b3ad80e374fa1a9daeadba79a4a664b93ee2cbbdc7elfMirai
2025-07-14 09:46:1550316dbe76f4ac9ee3e3de4773cc3d1e14ceb24b54d9754f2758a10e21fd66a3elfGafgyt
2025-07-14 06:26:48406f64d5ee8297963bdc098a541c4654d7a14c07aa978f2c4142647c06fd8864elfMirai
2025-07-14 05:37:39df69c739d22cfa2818c3179ebbad4171cf6327a6a97618af465e1da38378f872elfMirai
2025-07-13 23:26:27394fc2da0794ef02ef617ed99f19e5ad16a3a58ea003e5d0cd90772bd8940f10elfGafgyt
2025-07-13 23:25:30cbcd7c6c6534de5a09ab4f1b9e27cafbb683efc104e161dd2c71203c4e713d41elfMirai
2025-07-13 23:22:59d99ba26b8d24d904c5b2c49d59842b27ed6b667bb0cf2bf013569aa8e18cd740elfMirai
2025-07-13 17:58:41274265480997e201ffa5c0ba0e74d5e4d526b0f4cb26b4f7629598ed1b291a2aelfMirai
2025-07-13 17:34:30aa00a797467bfd8bc9d35d7e707331d0982a1c2dac6dbe46928a0d525a9870f7elfMirai
2025-07-13 17:17:100824b26cbd35342dcd79fa77b217b60722def5dc858eb534039b5299dba53bceelfMirai
2025-07-13 16:07:3705cd079443950caf5e9de5c7c7993b8ce4334f50a64ae327e546adcd31457921elfMirai
2025-07-12 11:34:361096f9245be25b5fdcdc884b35111557711996b8c3eb0a72ac2de8dcf0059f8eelfMirai
2025-07-12 09:26:125c605c9a5c126f53800d0d68016c7303e82819a8cbdab1d49b8ae4b596e49b62elfGafgyt
2025-07-12 09:26:11c4e14bab0eac64389616c05bc8213968b3166d8106cbfc7f8f1a835d1a7ed0b8elfMirai
2025-07-12 09:26:116258b01a95e07b659e4a23a2302336c13f78ab45a6c37e5dd44938c1f6814c40elfMirai
2025-07-12 09:26:11d2f5a0114e8216bc3884cf383e1ffa13ee398228ce9c8affe457b92922448cd8elfGafgyt
2025-07-12 09:26:11444f4edb504a921b789a6da68ca4a95df4202099a1e04782dc6d42fe8e13c3feelfMirai
2025-07-12 09:26:111bdc4ca9a173d16d4d72b9654767daa0b2c9b04e264579a0451efbf9104a226felfMirai
2025-07-12 09:26:11c2f53675f0f6be2ddf6622c434eb837f454393ab869cc0158b5ce352f7791d29elfMirai
2025-07-12 09:26:11c422d6409d4ae7ca70fd1710998bfa5bf819af68596c8d2edae633d74684857belfMirai