URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 196.251.84.254
Firstseen:2025-02-26 14:22:02 UTC
Total malware sites :22
Online malware sites :0 (0%)
Offline Malware sites :22 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-03-02 17:58:07http://196.251.84.254/main_arm5Offlinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:07http://196.251.84.254/main_mpslOfflinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:07http://196.251.84.254/main_ppcOfflinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:07http://196.251.84.254/main_armOfflinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:07http://196.251.84.254/main_mipsOfflinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:07http://196.251.84.254/main_x86Offlinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:07http://196.251.84.254/main_sh4Offlinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:06http://196.251.84.254/main_arm6Offlinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:06http://196.251.84.254/main_x86_64Offlinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:06http://196.251.84.254/main_arm7Offlinecensys elf fbi.gov mirai ext moobot NDA0E
2025-03-02 17:58:05http://196.251.84.254/main_m68kOfflinecensys elf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.m68kOfflineelf fbi.gov gafgyt ext mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.arm7Offlineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.sh4Offlineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.mpslOfflineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.ppcOfflineelf fbi.gov gafgyt ext mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.mipsOfflineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.x86_64Offlineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.x86Offlineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.arm6Offlineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.armOfflineelf fbi.gov mirai ext moobot NDA0E
2025-02-26 14:22:04http://196.251.84.254/bot.arm5Offlineelf fbi.gov mirai ext moobot NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-03-03 12:24:5620590e538f7f3ea97a31bd9c226ecceeb43e3318626534bca0c8291924e50963elfMirai
2025-03-03 12:24:53ffdf57f0d279b182c23820ed145d68ef34d42def9fdd6bac0d7d236e74acc5e6elfMirai
2025-03-03 12:24:508cfa9bbeb6f4594b131e016342903d49e92710a426023077f4a719a676ed6409elfMirai
2025-03-03 12:24:4307421f5c8f3f34af22204dd2ca68ae6cbb7001a203b2f8ca19f3c8112cd05207elfMirai
2025-03-03 12:24:418b187cfc4c9a34ce5d3f6ddc920f8fdcf99e1fc151712346d6920fd13cc4fae0elfMirai
2025-03-03 12:24:37a55c9ec553d5a7c59eb3367b14abdd10067bb626ba6dbfca900b8a1023ad4162elfMirai
2025-03-03 12:24:32c7cbde0cad1ca1f6d1ba66d21977342af29aa36e00dff6470033dc05e225c531elfMirai
2025-03-03 12:24:297d14e8e90dada9dc078ffbc6e5436a31e5fa3d24dfa0876443765fc234bc6739elfMirai
2025-03-03 08:51:471197f4665d1947b39f4a3f926b1f41c4ac34c4a0ab9a611fe839587c9dd8cb27elfMirai
2025-03-03 08:46:453735fdd6c6ec814f54931ee5eb1aa05faa3705372db28af7a654c0346b7c4eb6elfMirai
2025-03-03 08:36:02890786e0684b023f769a365417f78fbe11b3ae3bf9a82ec4d283e15e14324acaelfMirai
2025-03-02 17:58:072fbfbe8f669ddc1ee5443012b5dfa5bdcca775ecae0bd7fe9287536f508c7bb6elfMirai
2025-03-02 17:58:078c8765859a8630aa6368a0588a583e06243bf2ac9f6b11a3466704777e80be39elfMirai
2025-03-02 17:58:07a243ce7ee33e512e943cdf8dd2ef6eac63db763552cfccd10f564080db9afa11elfMirai
2025-03-02 17:58:07dd717fef57eecfc1113a1aa78364021be4cc1dd5bc568fb9ddb88a094b0e57f1elfMirai
2025-03-02 17:58:077c02437ec0c8033b3d35a31d7b4b65220d589bd2b69d33d21de586ac29f8dd92elfMirai
2025-03-02 17:58:0753a3699b473855914a401cb3381f46106171331e84299d823d58030532d111afelfMirai
2025-03-02 17:58:072a9ae2daddc3b7be6eace1c026b39616bfa3970cdf2caa715c9264df70a59251elfMirai
2025-03-02 17:58:06011eb52c17971634567d64854824f0ff4465845af3d2a73397584de9cc27c40felfMirai
2025-03-02 17:58:064c5267db20901e8fdb16a4a7a4112f18cce34d01ac70a6a9c968a5f5a8106ff7elfMirai
2025-03-02 17:58:06ada90918315113432826b4bbf965f4af0992e108ffbe64cfd899c36aeb9f6d38elfMirai
2025-03-02 17:58:05d90862c8a4757909306fdf9feb3a3d7068bfaaeb9cfd5dfbe81ca9279f036fd3elfMirai
2025-02-26 14:22:0442d472b05beffcd6d21642c4cc6dc18daaef73dd4b4d0cdf703f6a501dbfb8daelfMirai
2025-02-26 14:22:045ef65fb16f818c2db948b6f039c52dcfbdef13d5ed940ce290840e26ddb5fd04elfMirai
2025-02-26 14:22:041c98739acd467e319d01b930da1b84da64a44d32922d98131a8386bd6c75cf92elfMirai
2025-02-26 14:22:0499fc61b4f47344eb71aae8b089e98698137c86d42b744c16af959ac333db555felfGafgyt
2025-02-26 14:22:0418b96647e8c8a1fd095afcfd91209ce4efca1a8bb0c5ed96ff983702609e30f5elfMirai
2025-02-26 14:22:044049dc78a3d4d32ffb2d95b30ed3b4864e37cc230a9481432637942408fbe154elfMirai
2025-02-26 14:22:0471f5296e12cfecd0689fa6975249fb14625a6b4c715b537280d7c6cd67baa1adelfMirai
2025-02-26 14:22:04468855dc662c044c031599016d796e606c7d39473dc3eeb972d9ceb05cdd830celfMirai
2025-02-26 14:22:043b7e24b43a47c374bba3fb54830a46a7e515cb417303b866700d30c710a64149elfMirai
2025-02-26 14:22:0483e91ef6fce496f84a9274fd95875b5bf26f093a39e0caea14ae92b75f6f4a81elfMirai
2025-02-26 14:22:04a7b171f263d79583801492d66b5f8e3f7f232f1023a96f77d259ace7c94f7ffbelfGafgyt