URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 91.208.206.217
Firstseen:2025-05-06 12:59:03 UTC
Total malware sites :28
Online malware sites :0 (0%)
Offline Malware sites :28 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-05-06 12:59:15 91.208.206.217Not listedAS200019 AlexHost- MDyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-05-06 17:54:03http://91.208.206.217/bot.i686Offlineelf abuse_ch
2025-05-06 17:54:03http://91.208.206.217/bot.arcOfflineelf abuse_ch
2025-05-06 13:00:20http://91.208.206.217/zyxelOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/thinkphpOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/goaheadOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/zteOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/lgOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/huaweiOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/hnapOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/awsOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/pulseOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/jawsOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/gpon443Offlinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/hidden.shOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/realtekOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:20http://91.208.206.217/yarnOfflinecensys mirai ext moobot sh ua-wget NDA0E
2025-05-06 13:00:18http://91.208.206.217/bot.arm5Offlinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.armOfflinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.arm7Offlinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.arm6Offlinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.x86Offlinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.spcOfflinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.ppcOfflinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.mpslOfflinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.mipsOfflinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.x86_64Offlinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.sh4Offlinecensys elf mirai ext moobot ua-wget NDA0E
2025-05-06 12:59:15http://91.208.206.217/bot.m68kOfflinecensys elf mirai ext moobot ua-wget NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-05-06 13:00:20081023d57a6212be002f12e3abc59cf9bcf596aaaf64e25778499a9d36ae8259shMirai
2025-05-06 13:00:209b8a5c0bcd417c165b422fe770f1725ba9ecc97de8a7835ce504893efc4b1d36shMirai
2025-05-06 13:00:20dc8f745dfce8e79c312faf2047bccceeb677fed6e75e36dd2047a9aa95278282shMirai
2025-05-06 13:00:206b2291abd127acc3d1ce961ed4775e76719c3a262d476e1f4032e6938986644dshMirai
2025-05-06 13:00:20d4192638e21381b6eab31cd7fbeb8838ce353a5e4c65549fd2946c91284d5accshMirai
2025-05-06 13:00:20c2d6d58eb799edffda8b28de80f3774448e8dcc3a60bf60dc03e083ac6788d7fshMirai
2025-05-06 13:00:20093d295423c83230502c23b8962ca4e182f3d550e7de3552b682602b53c6b3a6shMirai
2025-05-06 13:00:20e7f255c5493f828a0d7210908c51557fb545125a8d4592c77947a28c56c3c370shMirai
2025-05-06 13:00:204a9b7ff3a7f778dfe95457db4f9edeeb18fb7378a85f9f87ea70708d4cfd3d84shMirai
2025-05-06 13:00:205b774fecf7bf25c2dd2d1c5b901b420231c202585f9faeccf9b9aa3bb821606cshMirai
2025-05-06 13:00:20ed75f00fe47bd2c43f0fcf451c5c2eff97422aa17f9883ec565dc174515bb4f9shMirai
2025-05-06 13:00:207bf6aab258c786baf87c877cacd66814c43a64bdaec3c5891483c3f34f95540fshMirai
2025-05-06 13:00:206acd419809c04ca20437ce71af1f90f92ee8550de45ec675dfadb338f9f780eeshMirai
2025-05-06 13:00:201dfac7c354c820d8f4fc770af6af48e7cfcf13bcb01ceece41946dd5442c4373shMirai
2025-05-06 13:00:186105110ec6f6c96b6ca1f14fc32fe7469ac4b3ff57dc5a49c9a0b9698f8978d9elfMirai
2025-05-06 12:59:153b581d612ba331c80d7ddc5830edc1c0e67a9ca7e79d7d171e9ceaaeb0d79af4elfMirai
2025-05-06 12:59:156105110ec6f6c96b6ca1f14fc32fe7469ac4b3ff57dc5a49c9a0b9698f8978d9elfMirai
2025-05-06 12:59:159ac883e9d3547028c50d2be65753a502fec5aa011c395e73a0ab2db2aaa4363eelfMirai
2025-05-06 12:59:15acca8824ad7b62c5baabb789d4b998e96a9984e8fb261b082a08e552ec69474aelfMirai
2025-05-06 12:59:15a3a024e45097d3af8753f9fe5ae3c0fef2fd5db29e267dbfe989d5de4b0ce37delfMirai
2025-05-06 12:59:15a6e59bb6c8313ab056702484643c26cfdc2d0cc30c9eb11730528ff162f88c4celfMirai
2025-05-06 12:59:15aa8f6d520c87106db4cd824f7af44ef75b5b2000adc3e709e38211e60e9d1b36elfMirai
2025-05-06 12:59:15920c23ede85dc9805c2cdb594dd0eb4a440a53fe0a1af132039174c937cd7443elfMirai
2025-05-06 12:59:15669c024055a447743cc20df0560f94828335e9d1eec71c1720340931064427d1elfMirai
2025-05-06 12:59:157b302ebc00e3a190e94b8ede8e81f760785e8c30538f89cc8ce05e249db27bb4elfMirai
2025-05-06 12:59:143f00302f1e74cc2a693bc9d1abd17e4e172e47a497213bbf85e067c890c81445elfMirai