URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 51.81.104.123
Firstseen:2024-10-10 01:24:04 UTC
Total malware sites :26
Online malware sites :14 (54%)
Offline Malware sites :12 (46%)
Newest active malware site :2026-05-29 03:14:18 UTC
Oldest active malware site :2026-05-29 02:48:17 UTC (Age: 6 days, 11 hours, 37 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-10-10 01:24:06 51.81.104.123hosted-by.armoredvm.netNot listedAS16276 OVH- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-05-29 03:14:18http://51.81.104.123/n2/lterouterOnlinesh ua-wget botnetkiller
2026-05-29 03:00:17http://51.81.104.123/n2/armv7lOnlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:59:17http://51.81.104.123/n2/armv4lOnlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:59:15http://51.81.104.123/n2/armv6lOnlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:59:15http://51.81.104.123/n2/x86_64Onlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:59:15http://51.81.104.123/n2/aarch64Onlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:59:15http://51.81.104.123/n2/mpslOnlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:59:15http://51.81.104.123/n2/armv5lOfflineelf mirai ext ua-wget botnetkiller
2026-05-29 02:58:19http://51.81.104.123/n2/sh4Onlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:58:19http://51.81.104.123/n2/m68kOnlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:58:17http://51.81.104.123/n2/mips64Onlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:58:17http://51.81.104.123/n2/ppcOnlineelf mirai ext ua-wget botnetkiller
2026-05-29 02:48:19http://51.81.104.123/n2/tbkOnlinesh ua-wget botnetkiller
2026-05-29 02:48:18http://51.81.104.123/n2/x86Onlineelf mirai ext ua-wget x86 botnetkiller
2026-05-29 02:48:17http://51.81.104.123/n2/mipsOnlineelf mips mirai ext ua-wget botnetkiller
2024-10-10 01:26:06http://51.81.104.123/bins/violetsh4Offlineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:26:06http://51.81.104.123/bins/violetx86Offlineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:26:06http://51.81.104.123/bins/violetppcOfflineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:26:06http://51.81.104.123/bins/violetmipsOfflineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:26:06http://51.81.104.123/bins/violetarmOfflineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:25:07http://51.81.104.123/bins/violetmpslOfflineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:24:08http://51.81.104.123/bins/violetm68kOfflineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:24:08http://51.81.104.123/bins/violetarm6Offlineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:24:06http://51.81.104.123/bins/violetarm5Offlineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:24:06http://51.81.104.123/bins/violetarm7Offlineelf mirai ext opendir DaveLikesMalwre
2024-10-10 01:24:06http://51.81.104.123/bins/violetspcOfflineelf mirai ext opendir DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-05-29 07:23:1269a3f8207de0386d28e743b27f532b3413d83f5b57b88213f633c6061fdb3361elfMirai
2026-05-29 03:14:18454aa25721156dff0eb2dec32628e40bcb5154f718da445c5481079a62b32d74sh 
2026-05-29 03:00:17f40e7d990ef4a2b9e7b3444eb480968ffa74b608779920e63ed5ac246825eeddelfMirai
2026-05-29 02:59:17f23b456e8367faa29e586ba1463c9686cac03c6b6720685908a0600c64f924e2elfMirai
2026-05-29 02:59:15b6a0ae0f7b27ba1aa7624d55aed39f1229b8039286a033451b8a89829ef40998elfMirai
2026-05-29 02:59:15a530187d666f996d308daea3f08eeeb6d67252bf2f491babd3815b882c265246elfMirai
2026-05-29 02:59:152639cea58eb054074923f9864d0ec50513c0a8d2896d0a2cb6bef80ee3443500elfMirai
2026-05-29 02:59:1501e6c07cd6d6f7c9b5d9af76eb1631ece66ac36c627668101cf2498b7e577273elfMirai
2026-05-29 02:59:15ec41a35c7df2a684c7a97da730d93c63a15dc34f619474e8cc03fd7afe063ef4elfMirai
2026-05-29 02:58:1966273723b54321eaf2581cdf7d2bf1d5f747fd3d4fbb3c61785b002ccf8d96d8elfMirai
2026-05-29 02:58:19a43d47cdd979a2d22a5ca513cd28b376802afcf96bea135b745788ddbecaa4a2elfMirai
2026-05-29 02:58:17640b19b8dd91986eb609c7323946b4252a2477e3c87b9f725aa61f593f19a635elfMirai
2026-05-29 02:58:171bde358e28aed0805f12946c2a8995da1b986f59f75a332e121d78948e2c5516elfMirai
2026-05-29 02:48:1968fa126b9676b42b751e650a22937a624d13457a0df92d3361dfbe86ad943c52sh 
2026-05-29 02:48:18ac48eac307da45bfbb2fbbd9238ae75cf83367e27ef89f61db0d75366714fbe7elfMirai
2024-10-10 01:26:06c8ff95037e7d111863ac6da808a9aba2d06770ec03be08479c0be6c9370cd7c2elf 
2024-10-10 01:26:06a145b9509242b8b7986881ff40766218560e82128d862ebd22c17abd90af63dbelfMirai
2024-10-10 01:26:06a623daa8ed4f91d2e75a2f53d5a1514816b6657d90937e03344159fe54968114elf 
2024-10-10 01:26:06c18ad99928420db7fb4fecc8589ddf6a370374081a8fabb6d64c554e919245f8elfMirai
2024-10-10 01:26:0634e55727410391f299b0c31204cdbbe5867f17c3c6db98ca11001b71c500441belfMirai
2024-10-10 01:25:07dd70ccf5207ff5c37c8d3d7bc12015b8c3bbaad935cc1eb2e1b0b41e47bfe4baelf 
2024-10-10 01:24:06a1a65ed4d6a3bed61a9fc9db31d627f0bc7f4afcad5754fe4c8f62ce7a788d0belfMirai
2024-10-10 01:24:060febcf70b7ba238dbcc1210a92706717a8e56705c0261bda2639d4c3921a5f84elfMirai
2024-10-10 01:24:06ca2ae9a099f1efd62e16aec229f7314b97d50df954dc12bc223b2de71364d681elfMirai
2024-10-10 01:24:06cc0170db332799d7af341896245d9519ef9fd02d8abb2d8773dc0cd5d310e329elf 
2024-10-10 01:24:06ee291bf00e8b9bf71b95bf0e4eae8e02260893dfe740a23e11cde05ba19046d0elf