URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 94.156.152.90
Firstseen:2025-12-25 19:12:05 UTC
Total malware sites :18
Online malware sites :17 (94%)
Offline Malware sites :1 (6%)
Newest active malware site :2025-12-26 20:16:16 UTC
Oldest active malware site :2025-12-25 19:12:17 UTC (Age: 1 day, 9 hours, 29 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-25 19:12:17 94.156.152.90Not listedAS214209 INTERNET-MAGNATE- BGyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-12-26 20:16:16http://94.156.152.90/auto.shOnlinesh ua-wget NDA0E
2025-12-26 07:15:29http://94.156.152.90/bins/sh4Onlineelf mirai ext ua-wget abuse_ch
2025-12-26 07:14:29http://94.156.152.90/bins/ppcOnlineelf mirai ext ua-wget abuse_ch
2025-12-26 07:14:29http://94.156.152.90/bins/arm5Onlineelf mirai ext ua-wget abuse_ch
2025-12-26 07:14:29http://94.156.152.90/bins/spcOnlineelf mirai ext ua-wget abuse_ch
2025-12-26 07:14:28http://94.156.152.90/bins/armOnlineelf mirai ext ua-wget abuse_ch
2025-12-26 07:14:21http://94.156.152.90/bins/mipsOnlineelf mirai ext ua-wget abuse_ch
2025-12-26 07:14:21http://94.156.152.90/bins/arm7Onlineelf mirai ext ua-wget abuse_ch
2025-12-25 19:15:20http://94.156.152.90/c.shOnlinemirai ext sh ua-wget NDA0E
2025-12-25 19:15:20http://94.156.152.90/tftp.shOnlinesh ua-wget NDA0E
2025-12-25 19:15:17http://94.156.152.90/wget.shOnlinemirai ext sh ua-wget NDA0E
2025-12-25 19:15:07http://94.156.152.90/w.shOnlinemirai ext sh ua-wget NDA0E
2025-12-25 19:13:18http://94.156.152.90/bins/x86_64Onlineelf mirai ext ua-wget NDA0E
2025-12-25 19:13:18http://94.156.152.90/bins/arm6Onlineelf mirai ext ua-wget NDA0E
2025-12-25 19:12:21http://94.156.152.90/bins/mpslOnlineelf mirai ext ua-wget NDA0E
2025-12-25 19:12:17http://94.156.152.90/bins/x86Onlineelf mirai ext ua-wget NDA0E
2025-12-25 19:12:17http://94.156.152.90/bins/m68kOnlineelf mirai ext ua-wget NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-12-26 20:16:16095d2bd5ed1630e328422768ead379b6f111ef981797d029985dbfc21f699fd0sh 
2025-12-26 07:15:29439b5691344326a2b67d18c5414f27c50d2b5be2bba021a6c74fbd718fd956ceelfMirai
2025-12-26 07:14:2914d5f0267f0ca1c67bdd8e3075ee3598e2ae7444c7f87bab0b862b3b5ee6ced7elfMirai
2025-12-26 07:14:29f6fbf730c614f55b266174036c98d1827bc602c3c830ccff25454272c694b91felfMirai
2025-12-26 07:14:282951437574f0b44b68855462c650bc1d7b10fbaf36ed86e7a45faec38b87ee6eelfMirai
2025-12-26 07:14:28e0844b0cdf611d8a7521ff37ca40ab691a2c2c3e28a4b9571ff9456d5b5a2b77elfMirai
2025-12-26 07:14:210f8f041acce3852c7ee78caffddcb4e941206b3c5b905bb5e6c061285ce08852elfMirai
2025-12-26 07:14:21c05ee431ce3abe70afdbf9710b0ab3864ecdd8de9f8697c077f956a39bdf8217elfMirai
2025-12-25 19:15:20aeda42b413fe50a381d97e1108aa336ee6be8489888b2c2db4ebeddbdd4392f0shMirai
2025-12-25 19:15:20aa3803a34237fabfd445dd8a7ed0853168f2bdce7289e38b0fc3f1260d2e3cf4sh 
2025-12-25 19:15:17cadf82600085db2bd650c43d6323f2383f7696805a7cd26a2744f2f01743c8b2shMirai
2025-12-25 19:15:079f45aa714e603901aa6c7627fab86a1def241ecb30dea3575fbbb8c8269bc4b9shMirai
2025-12-25 19:13:18c0fe3a9a893f48296e27f62bb47a35480d0255c5df46d2185963ce8552004535elfMirai
2025-12-25 19:13:1846588e27520d4ff181d33bc7ff021903d1ecd13f376657f5db7af180ca2e3ac6elfMirai
2025-12-25 19:12:21d80d236e16bfef3dd5b8aacb4aff4226616be790c3b5dc2325af73e71d61441celfMirai
2025-12-25 19:12:1703ecda01330d867752a09c2e6118fed74a061d4f5222d492ab43640e0d36e6c4elfMirai
2025-12-25 19:12:170fc0c0aa10d7f989ee6709c50908144d95b2c62ad512419f690652c906db8ed5elfMirai