🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 94.154.43.221
Firstseen:2026-09-07 07:16:05 UTC
Total malware sites :18
Online malware sites :18 (100%)
Offline Malware sites :0 (0%)
Newest active malware site :2026-09-07 17:52:19 UTC
Oldest active malware site :2026-09-07 07:16:06 UTC (Age: 1 day, 4 hours, 50 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-09-07 07:16:06 94.154.43.221SBL697626AS219502 STORMCLOUD-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-09-07 17:52:19http://94.154.43.221/iran.mipsrouterOnline94-154-43-221 elf mirai ext ua-wget BlinkzSec
2026-09-07 17:51:17http://94.154.43.221/iran.armv6lOnline94-154-43-221 elf mirai ext ua-wget BlinkzSec
2026-09-07 17:51:17http://94.154.43.221/iran.armv5lOnline94-154-43-221 elf mirai ext ua-wget BlinkzSec
2026-09-07 17:51:17http://94.154.43.221/telnet.shOnline94-154-43-221 mirai ext sh ua-wget BlinkzSec
2026-09-07 17:51:17http://94.154.43.221/iran.armv4lOnline94-154-43-221 elf mirai ext ua-wget BlinkzSec
2026-09-07 17:51:17http://94.154.43.221/iran.i486Online94-154-43-221 elf mirai ext ua-wget BlinkzSec
2026-09-07 17:51:17http://94.154.43.221/iran.armv7lOnline94-154-43-221 elf mirai ext ua-wget BlinkzSec
2026-09-07 08:19:07http://94.154.43.221/iran.mipselOnlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.mipsOnlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.m68kOnlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.arcOnlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.powerpcOnlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.sh4Onlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.aarch64Onlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.sparcOnlinecowrie honeypot mirai ext YaRi78
2026-09-07 08:19:07http://94.154.43.221/iran.x86_64Onlinecowrie honeypot mirai ext YaRi78
2026-09-07 07:16:07http://94.154.43.221:9999/iran.x86_64Onlinecowrie honeypot mirai ext YaRi78
2026-09-07 07:16:06http://94.154.43.221/cat.shOnlinecowrie honeypot mirai ext YaRi78

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-09-07 17:52:19de8fcf8fb26e6fffe21211674362ffdd3d92b139dc4693b00bd7d3bdb8999218elfMirai
2026-09-07 17:51:17e29c40498d1e2b650e65855ab7051475e4aa6bc54e9b0d8352dda798c5aba339elfMirai
2026-09-07 17:51:1751ac3c75c8583cffc3f61777a7af6e4b068dcf7698ab89c89a57f15fab59bf18elfMirai
2026-09-07 17:51:175180925f28c24bd637c47417c1542736aa3989e7e174d885897cdce880bcda44shMirai
2026-09-07 17:51:17f692af11faa6ec2919d9269d28c7a962ee970f6199e92ad85676255bd5f8b91celfMirai
2026-09-07 17:51:177bc4b2aef74456cca1499e1c6e3ce28827aa3c2d6e4a1f18cad547ad47e0b8ffelfMirai
2026-09-07 17:51:17699848a33a1808fe612ce4e2e1f1bb292546509b3939c56b6842e315ad02d731elfMirai
2026-09-07 09:38:284de34e22fec36167a9fabbe29b8eb38482ad5d16e59bce2fdd735b7ac15a0a86shMirai
2026-09-07 09:07:24e102ee5bbf9282a4c5f5b38c5554668eefc67a9782004631d1aa837e18dfe159elfMirai
2026-09-07 08:19:07b77142d8fa79f421c402fae649e041589c6e3584e69def5789b704af6b522535elfMirai
2026-09-07 08:19:07dea6d274c1c7c34d160bd12c87a27ef5c5edb1f4934c4557bb54f1857c7be360elfMirai
2026-09-07 08:19:07abc54ab37e423461c6a67b7d65f342451e42fbd93e4ba83fd571c3236cfcfc25elfMirai
2026-09-07 08:19:07b5099a274a6192b76e132488df1a051b2e6ccb68fc916901ddf73ef9d0f01fe2elfMirai
2026-09-07 08:19:077b46bce6515f1189593f7fbd7edb24ce2e152e0fbb6b57808515db882b331060elfMirai
2026-09-07 08:19:07b610ed02b56e1634c71f36076e61e7bf69aca774e745df6c698d5d9f470d48b8elfMirai
2026-09-07 08:19:07e81a526ac771e19dc806d8965e10365a698a742ee85afa568d05141eaeb36975elfMirai
2026-09-07 08:19:0760bd242f448228391063d6a1521233087ba3602f5521f526a784d6325ffe8377elfMirai
2026-09-07 08:19:07de1de068b151fa14fdf94ba39d0503f0ee10a05fe0f9146c43928a96db25e084elfMirai
2026-09-07 07:16:07de1de068b151fa14fdf94ba39d0503f0ee10a05fe0f9146c43928a96db25e084elfMirai