URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 91.208.206.49
Firstseen:2025-12-26 20:20:05 UTC
Total malware sites :27
Online malware sites :27 (100%)
Offline Malware sites :0 (0%)
Newest active malware site :2025-12-26 20:41:15 UTC
Oldest active malware site :2025-12-26 20:20:16 UTC (Age: 5 hours, 11 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-26 20:20:16 91.208.206.49aresthegoatfkr.comNot listedAS200019 AlexHost- MDyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-12-26 20:41:15http://91.208.206.49/no_killer/ppcOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:17http://91.208.206.49/no_killer/mipsOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:17http://91.208.206.49/no_killer/arm7Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:17http://91.208.206.49/no_killer/sh4Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:17http://91.208.206.49/spcOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:17http://91.208.206.49/no_killer/mpslOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:17http://91.208.206.49/no_killer/arm6Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:17http://91.208.206.49/x86Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:13http://91.208.206.49/ppcOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:13http://91.208.206.49/no_killer/x86Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:40:13http://91.208.206.49/no_killer/x86_64Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:39:18http://91.208.206.49/no_killer/m68kOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:39:18http://91.208.206.49/sh4Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:14http://91.208.206.49/dbgOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:14http://91.208.206.49/no_killer/arm4Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:14http://91.208.206.49/mpslOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:14http://91.208.206.49/m68kOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:14http://91.208.206.49/no_killer/i686Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:14http://91.208.206.49/mipsOnlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:08http://91.208.206.49/arm6Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:08http://91.208.206.49/i686Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:08http://91.208.206.49/no_killer/arm5Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:08http://91.208.206.49/arm5Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:38:08http://91.208.206.49/arm4Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:21:07http://91.208.206.49/wget.shOnlinecensys mirai ext sh ua-wget NDA0E
2025-12-26 20:20:16http://91.208.206.49/x86_64Onlinecensys elf mirai ext ua-wget NDA0E
2025-12-26 20:20:16http://91.208.206.49/arm7Onlinecensys elf mirai ext ua-wget NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-12-26 20:41:15298aca705d9a476e794e1080f2d75bc9ee42ac09eb5d3ecfbe53df7e523affc6elfMirai
2025-12-26 20:40:171ebbe6d07bc3cf98dc1913d43cf95d6aaf4b9ea3486b66cd9b581b310ff8048aelfMirai
2025-12-26 20:40:1794dc3d1cfc491cf313fccf87873a53c2ff104680e22a552d266319492d3766b6elfMirai
2025-12-26 20:40:17f271296e8bc49b4471960e07930ce0e1c4e78b4af4e89d03b83e129db6f36e28elfMirai
2025-12-26 20:40:17f76596dd41fba26bab3ea99d0aada03b62eaf9b33115fc714d34db002cb2c6a0elfMirai
2025-12-26 20:40:17a0a804e0739024717a1bf19ae23b69d5ef32ef5112c667586083ffcb511bace5elfMirai
2025-12-26 20:40:1777557661b9f08d7b2185848ea2cb4ecbf4003ed97857df8023225257c0b7643delfMirai
2025-12-26 20:40:17c8ac6f287e43d5c742b143d33a3752e0781f5f0ac97d3f8ba88353fe9b3bf2a5elfMirai
2025-12-26 20:40:137b8497b6665e3e8694b339a485e85e6e14a08907f8768894795d1f8f78247b70elfMirai
2025-12-26 20:40:134bbf01d2a50c3b8cec1c4961fccda6520eb73f0026474aa4dce42ff319921c4felfMirai
2025-12-26 20:40:138f3f3e3cf494367efc7b4b0c40af2d488dd66cc6c8bcc2e9f637e638f1d6dd4aelfMirai
2025-12-26 20:39:18b29321afad103ba0907cd40c9c0a815a82f3ec02849be18d128a6f17b0ac6033elfMirai
2025-12-26 20:39:1838139402d78e9dcd09f03a7fa8f97b48c446d0910886410b30351694cce2f66celfMirai
2025-12-26 20:38:149bdfd40095b173ed56e4fd2ef6d4ad2938b73a7b52432e7167c19362dd4a130eelfMirai
2025-12-26 20:38:14492d0aa149c5165efc84939eb20fcbf9651a48c7f459ac3114371b33400a78d1elfMirai
2025-12-26 20:38:14375e1279ba0cf63ec33bd1ad0a4be681f5fbf75c7c2e642a718b79b36bc7cbbcelfMirai
2025-12-26 20:38:14462d7461c0e09d555f198f3ce401916e1efdbe46c7a44bb8f9b39135f96d4f45elfMirai
2025-12-26 20:38:1427611b6268e6fd5e023d789f7f9ed42b3869d009a8229e0c4bf62bd7d48bea28elfMirai
2025-12-26 20:38:14b0b8d30de6afb2719b8c36b455b306cd3d95f898d0c38aec502f583fb47147d3elfMirai
2025-12-26 20:38:089b3198175021e3d4bb3378e708ef4eedf06032b1455c6166e4524994ec222f0delfMirai
2025-12-26 20:38:08fcfd6238efaa0f360abc6215d1d42449b0c26a17f40c72724dc2cb48cd37fcf5elfMirai
2025-12-26 20:38:0833486059a56afd8d5a093e4711873db7095645a9a5d249fb8d1e3582d2aea3f8elfMirai
2025-12-26 20:38:08c3c76a4b5c29e41897014168095530bfa26b96550da5a1a289ab0a83b1b50657elfMirai
2025-12-26 20:38:088615c605803586498ed882561565c639ba2804dc57305a3eca012e2e0037836celfMirai
2025-12-26 20:21:0740efdc7ef4c9e5a47cc4766040209704bea1dd7c8b21bbbf88b8081f0e5d2f49shMirai
2025-12-26 20:20:164e8f94777b42c157157575c2fc774fe2b559f7febd6eb9ceb91e6f56263342a3elfMirai
2025-12-26 20:20:156a924fa15269fd2157c372e18e4c4ab921534e0ac030bfde9be51ef36850ce51elfMirai