URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 41.216.189.92
Firstseen:2026-07-11 06:01:06 UTC
Total malware sites :27
Online malware sites :18 (67%)
Offline Malware sites :9 (33%)
Newest active malware site :2026-07-11 18:31:35 UTC
Oldest active malware site :2026-07-11 06:01:09 UTC (Age: 1 day, 1 hours, 13 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-11 06:01:09 41.216.189.92Not listedAS211138 PRIVATEHOSTING-NET- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-07-11 18:31:35http://41.216.189.92/c.shOnlineopendir sh ua-wget botnetkiller
2026-07-11 18:31:35http://41.216.189.92/2.shOnlinemirai ext opendir sh ua-wget botnetkiller
2026-07-11 18:31:35http://41.216.189.92/nz/c.shOnlineopendir sh ua-wget botnetkiller
2026-07-11 18:31:35http://41.216.189.92/3.shOnlinemirai ext opendir sh ua-wget botnetkiller
2026-07-11 18:31:33http://41.216.189.92/wget.shOfflineopendir sh ua-wget botnetkiller
2026-07-11 18:31:33http://41.216.189.92/nz/wget.shOfflineopendir sh ua-wget botnetkiller
2026-07-11 18:31:33http://41.216.189.92/nz/w.shOfflineopendir sh ua-wget botnetkiller
2026-07-11 18:31:33http://41.216.189.92/w.shOfflineopendir sh ua-wget botnetkiller
2026-07-11 09:34:31http://41.216.189.92/nz/nz.i468Offlineelf ua-wget abuse_ch
2026-07-11 06:01:30http://41.216.189.92/nz/nz.x86Onlineelf mirai ext opendir ua-wget x86 botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.arm6Onlinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.i686Onlineelf mirai ext opendir ua-wget x86 botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.mpslOnlineelf mips mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.sh4Offlineelf mirai ext opendir SuperH ua-wget botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.mipsOfflineelf mips mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.m68kOnlineelf m68k mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz.shOnlinemirai ext opendir sh ua-wget botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.arcOfflinearc elf mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:30http://41.216.189.92/nz/nz.ppcOnlineelf mirai ext opendir PowerPC ua-wget botnetkiller
2026-07-11 06:01:29http://41.216.189.92/nz/nz.spcOnlineelf mirai ext opendir sparc ua-wget botnetkiller
2026-07-11 06:01:29http://41.216.189.92/nz/o.xmlOnlineopendir sh ua-wget xml botnetkiller
2026-07-11 06:01:25http://41.216.189.92/nz/nz.arm5Onlinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:25http://41.216.189.92/nz/nz.x86_64Onlineelf mirai ext opendir ua-wget x86 botnetkiller
2026-07-11 06:01:25http://41.216.189.92/nz/nz.armOnlinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:09http://41.216.189.92/nz/nz.arm7Onlinearm elf mirai ext opendir ua-wget botnetkiller
2026-07-11 06:01:09http://41.216.189.92/o.xmlOnlineopendir sh ua-wget xml botnetkiller
2026-07-11 06:01:09http://41.216.189.92/nz/debugOfflineelf mirai ext opendir ua-wget x86 botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-07-12 00:17:48f1bed76655cc8cce9ee9ac2857fed6b6cf1eb6a6d5446ae8144b6529d07ddf77shMirai
2026-07-11 23:27:10889f8101436dbf4c3d7bf4a8ed9c399bbacedaaf0c64c731eeebcd2cee6f435bshMirai
2026-07-11 18:31:3509553506b298fd49150090669238577ce5127b53d70718c2bbb7b99b0f74e257sh 
2026-07-11 18:31:34bdb2209c0d4b4cc273541f9313385ba6a56b60ca9b7046987c0e7669bf06093eshMirai
2026-07-11 18:31:3409553506b298fd49150090669238577ce5127b53d70718c2bbb7b99b0f74e257sh 
2026-07-11 18:31:34bdb2209c0d4b4cc273541f9313385ba6a56b60ca9b7046987c0e7669bf06093eshMirai
2026-07-11 12:24:34be62b44d3c734fa6d26f8f16f264bb4683f50011d444d4296575c92bb74620ccshMirai
2026-07-11 06:01:30bcefc4b61aebc8afbcde7b68047750547cae7fa0fb71951a751a351b1ac47e39elfMirai
2026-07-11 06:01:307a4a3a129b726b531941b41d734521e8905d57a57a7e8a0a7e5dff41ed22f6baelfMirai
2026-07-11 06:01:30f1bed76655cc8cce9ee9ac2857fed6b6cf1eb6a6d5446ae8144b6529d07ddf77shMirai
2026-07-11 06:01:309cc12d325ece68385afbd03d105a0cece93ced51d07138e76ecf2ccc660a836felfMirai
2026-07-11 06:01:30af062bc5584636c98907b1c0b8e8e8632b860b9af789c023284f797303dc7e0celfMirai
2026-07-11 06:01:3077ed8c7518a32663fb766f729075dcdddc355c8d6ebe381092df51bb891e0cfcelfMirai
2026-07-11 06:01:30b116db6dfee3dc658ef940f4c58cf5a8b2e987ac77e45b12257132ea53917d66elfMirai
2026-07-11 06:01:304ff7c8a8a66dddc9b33794e7823d606a3cd68b1b6ec33c842165484008289ca8elfMirai
2026-07-11 06:01:30471329e28d25e75c837ed86f7ef62f8516745fefd44363c131e048b00a0b5562elfMirai
2026-07-11 06:01:30c6d6f2a52c4b1047f399481d23d965cae1909152ef487addd9b4d626d5adba98elfMirai
2026-07-11 06:01:2932cc30b4815f06da7a99ab9a3ba22bd54e390686e5a652ad13a79fcc88302c8delfMirai
2026-07-11 06:01:291d882d1222af79dfd7e8df2209feef3c990d0937ab7715c1cf7ea74a009dc6fbsh 
2026-07-11 06:01:2529cb91509e46e64b294da34d918f81e2133df0cfff3bb600897f7533b93aa068elfMirai
2026-07-11 06:01:2574c8304588122ce77715a39c8988e1586d17613091334c6815573ae136b19db3elfMirai
2026-07-11 06:01:25383086ae4d3173515be7e7fce8574960cbc0e800ebecc5cf3f36f5cfe395e2e2elfMirai
2026-07-11 06:01:0985966314684daf60d9d1789f8e4afda6e978af253c15c7d16fcc19edd5ae6fbdelfMirai
2026-07-11 06:01:081d882d1222af79dfd7e8df2209feef3c990d0937ab7715c1cf7ea74a009dc6fbsh 
2026-07-11 06:01:08882a14264606dc22084aa89b7fc1ecb3ef2472cd3c5c6cbe3ac49c39f771f9ebelfMirai