URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 94.154.43.148
Firstseen:2026-07-29 11:15:06 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-29 11:15:18 94.154.43.148SBL697626AS219502 STORMCLOUD-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-07-30 01:35:24http://94.154.43.148/MMaaRRiiOisecTanee/MMaaRRi...Offlineelf mips mirai ext ua-wget botnetkiller
2026-07-29 11:15:25http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:24http://94.154.43.148/wget.shOfflinemirai ext sh wget Soncraft___
2026-07-29 11:15:18http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:18http://94.154.43.148/z0l1mxjm4mdl4jjfjf7sb2vdmv...Offlinemirai ext sh wget Soncraft___
2026-07-29 11:15:18http://94.154.43.148/c.shOfflinemirai ext sh wget Soncraft___
2026-07-29 11:15:18http://94.154.43.148/w.shOfflinemirai ext sh wget Soncraft___

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-07-30 01:35:24fb5c18b832e23448d78e7b2542579d1c79362636ab96b5299052614166d4e3faelfMirai
2026-07-29 11:15:258b411ac80e787590b787d87f1e96814eff9c27a0284ef76f0d95ad9367171be7elfMirai
2026-07-29 11:15:24d58dfeb75e2341d975e48d9553767909c176df178844215bc2bdf1660f5d3969elfMirai
2026-07-29 11:15:24dc26c4aa0b5dd2cb74609168a68c818be6b9c3821fa56a5a9f659a5ff319a628elfMirai
2026-07-29 11:15:24a5e14c19f1f736aa74a7fea4cf60dfbc22761b71cb24b64bbd77c0bf3fb1d0c1elfMirai
2026-07-29 11:15:24608c40e5ff9b0dd4d601d0a81751e1dc5cfa0f28dc526c1cb53d5d0898579199elfMirai
2026-07-29 11:15:24c7efbd6038b27b51b39b30fcddfb91bbab0418997b9d05f639d0e053f23fb621elfMirai
2026-07-29 11:15:24197c435bd667bc44ae26a92898c34c36f8a093228409fdf5340fcae9ccabd642elfMirai
2026-07-29 11:15:24faf3988b8f6dc690efb46aae98efcbe47e489958759e0dc60cb697019fe69e81elfMirai
2026-07-29 11:15:240e50f54b54e3e179fb5530db13375a7a6bc297438511d374c680f32834934aa3elfMirai
2026-07-29 11:15:24142b78add17ae70fd5e5d3d5d3d66bec9fd2ac2ea1b4a11ef2e95538de829446elfMirai
2026-07-29 11:15:245ac2f143982ab47b9f97f33498bdb76a2305e7f71f9592ba7250df5f861e8663shMirai
2026-07-29 11:15:182d98b44c0532415ce47394f90b47da593c0619b21b486dbb80727d05498eafbbelfMirai
2026-07-29 11:15:181338657109a743ffc7fd9ea023c161a7dfd55b44a987c102019a5e3fea6b9e46shMirai
2026-07-29 11:15:17fb5c18b832e23448d78e7b2542579d1c79362636ab96b5299052614166d4e3faelfMirai
2026-07-29 11:15:17497a067b6a911e187d21bb71e03c38892c5227700b35809e4526f583a4df007ashMirai