URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 104.167.221.114
Firstseen:2025-06-13 12:00:05 UTC
Total malware sites :27
Online malware sites :0 (0%)
Offline Malware sites :27 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-20 08:50:10http://104.167.221.114/faith.shOfflinegafgyt ext sh ua-wget BlinkzSec
2025-06-17 06:32:06http://104.167.221.114/android.shOfflinegafgyt ext sh ua-wget BlinkzSec
2025-06-17 06:32:06http://104.167.221.114/payload.shOfflinegafgyt ext sh ua-wget BlinkzSec
2025-06-17 06:32:06http://104.167.221.114/update.shOfflinegafgyt ext sh ua-wget BlinkzSec
2025-06-17 06:32:06http://104.167.221.114/dlr.mipsOfflineelf mirai ext ua-wget BlinkzSec
2025-06-17 05:27:07http://104.167.221.114/selfrep.shOfflinegafgyt ext sh ua-wget vanilla
2025-06-13 19:09:12http://104.167.221.114/jaws.shOfflinegafgyt ext sh ua-wget NDA0E
2025-06-13 19:08:19http://104.167.221.114/zte.shOfflinegafgyt ext sh ua-wget NDA0E
2025-06-13 19:08:19http://104.167.221.114/x86.shOfflinegafgyt ext sh ua-wget NDA0E
2025-06-13 19:08:19http://104.167.221.114/tplink.shOfflinegafgyt ext sh ua-wget NDA0E
2025-06-13 19:08:14http://104.167.221.114/ray.shOfflinegafgyt ext sh ua-wget NDA0E
2025-06-13 19:08:13http://104.167.221.114/dvr.shOfflinegafgyt ext sh ua-wget NDA0E
2025-06-13 18:52:10http://104.167.221.114/x86Offlineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:51:13http://104.167.221.114/armOfflineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:22http://104.167.221.114/arm5Offlineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:22http://104.167.221.114/spcOfflineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:22http://104.167.221.114/powerpcOfflineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:19http://104.167.221.114/i686Offlineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:19http://104.167.221.114/x86_64Offlineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:19http://104.167.221.114/sh4Offlineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:19http://104.167.221.114/mipsOfflineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:18http://104.167.221.114/arm6Offlineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:18http://104.167.221.114/mipselOfflineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:18http://104.167.221.114/m68kOfflineelf gafgyt ext ua-wget NDA0E
2025-06-13 18:50:17http://104.167.221.114/ppc4fpOfflineelf ua-wget NDA0E
2025-06-13 18:49:13http://104.167.221.114/tbkdvr.shOfflinegafgyt ext sh ua-wget NDA0E
2025-06-13 12:00:14http://104.167.221.114/arm7Offlineelf gafgyt ext ua-wget ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-06-20 08:50:1022835c443bcc0927ad89eb3da673bc4dd8eff38962c9c498dc51e14410de53ccshGafgyt
2025-06-19 05:42:57d8253b55940a3d9f0a47c58ea5e1a37c1149217c7615d4a00bafc21d31035a19elfGafgyt
2025-06-19 05:33:02fd2f0b1c70e97c3c67ab54ba87a2125fb30e25a6d6050cae36a5f7f14726189celfGafgyt
2025-06-19 05:27:3026b8ee688812ddc7257e35c1c071a3b7d9f9487d9638be829b9998ac0894d05delfGafgyt
2025-06-19 04:50:42e89afd876b71345828df07ef82a4e6684a26cd9d8dfe5d0ee139e367de3b7330elfGafgyt
2025-06-19 04:50:38857170c9591cce002273043a6f991f58683ef3bc2be7afcca54be1dc0097b57belfGafgyt
2025-06-19 04:34:05880ddb6fcd0ef13b964069147f6b97b8bbd61cbe92feaf20aa25473179c50612elfGafgyt
2025-06-19 04:33:43d24eb20bdf28154c538be3ad296756f743753886e21a86f84e41482b7a4a45f3elfGafgyt
2025-06-19 04:31:348d8e03d31f4169577641596c31ab5ab0990ef39aa5ffea486330b230632a737aelfGafgyt
2025-06-19 01:53:153be913565735d606fc2d64b098763b52ed9a6ba9ca93d89f723409b0348557ebelfGafgyt
2025-06-19 00:42:13476e3c2d0c589ce2372f3d1bbb59bd8f3d800847b545e360eb85a290d675e254elfGafgyt
2025-06-19 00:28:155f83df06a5fd17487df62de3f9b939088dcb1d08d06ac762df888264ec9da0e8elfGafgyt
2025-06-18 23:38:56f43693a946b59f1d132fc620b8fc3683433c87cb046207cb18aad68b4ea091d6elfGafgyt
2025-06-18 23:36:42235733c3b02759f01d846d0333b94b3dbf2fee43d843e46f4ce062c30421b606elfGafgyt
2025-06-17 06:32:06086cbcf13059b25f82bb6d33e2bd3952e85e7d33fc0bac1b9e87e506f25be58cshGafgyt
2025-06-17 06:32:0615c5a25b3b4846db4a15f44b60ae39fd6b16ae2d5c5b038af4655d3d2826c08eshGafgyt
2025-06-17 06:32:06d50a439703824a4fff91460bc013a4581bbc421072cb4963d0fcca25a5d94d12shGafgyt
2025-06-17 06:32:063a560927bdb07a716b2b033c4f9805b50f30dc6532376ea6afdee8999338f484elfMirai
2025-06-17 05:27:07f48ed7be2f25639dc09e48c0c61a51b6588e4bb3fadad514cf4087daf482a56bshGafgyt
2025-06-17 04:20:484668cc0e65567f34f0313a17aeaeff51496206add4a3dd82b3f4c04b3a66e9d9shGafgyt
2025-06-16 10:25:0619c9de5d8df2080b4fa014822135c791ab6ac473908f8f59077f726a47bf4d68elfGafgyt
2025-06-16 05:22:08bafd73e92927ce7fb9ff2c32b1363644ade1ed569d634df3f8e9eef45f67bcb4elfGafgyt
2025-06-16 05:19:59f3781943e3e1705b9aae678aceb2f639439b736c1e3bdc90c46094a815332c5felfGafgyt
2025-06-16 05:19:236799639861c353722a3a6a4cebb20cfd6795ee38e714098e25a0419f21bb64a0elfGafgyt
2025-06-16 05:05:54e70bcc50967d42e998fda61e96d4b02afcb214db17e187801d6efd6e00ef2654elfGafgyt
2025-06-16 05:01:093902bc3972b09116c20172a0603592072d780a683cf026a5aaf69a2bee0b29c2elfGafgyt
2025-06-16 04:59:5042ef3caed92ec3ac1831c2fe5c911a0c0cdce56031c1b0f3f44d6478d9571c16elfGafgyt
2025-06-16 04:35:24d13ef2d656203d17db903a9f0790a95d93b75df4c0dc5bfdbe317dc2efff80b3elfGafgyt
2025-06-16 04:29:429f9782b7ad49ef3f07de1857ef1d25533664c77756564499fd9d90ac9b8a7b1belfGafgyt
2025-06-16 04:28:578af6a72b858a3301a95026b32eec78d8340ed7d67088e9d40bd97d1ce172f8aaelfGafgyt
2025-06-16 04:25:19c03dbdf9e3a866a3de4e0ee16f079074638861a0d43d405793820253f179c321elfGafgyt
2025-06-16 04:23:339e774abe2146e123fc014227147fff9b934bce25186b23a4917ba4d48ee6534felfGafgyt
2025-06-16 04:23:1971fc57877fc30df8701b5074ea6ae938e8aa85935da4a308d2e5fa4a6cde4a9belfGafgyt
2025-06-15 23:06:262b100518f24b7e31dd14e195aea0a5a7b55b7dff23d9d485b1efe0d3276cc010elfGafgyt
2025-06-15 23:05:35d54cb1b91a1f819f4691f5ce1dc0c8ab8ccd33a79f72111fc2c46286088be120elfGafgyt
2025-06-15 22:54:40a137a6ca69be56687b7138b38139fb55dec2c057b6fe979b7bd42dfcad00d783elfGafgyt
2025-06-15 22:44:4241a25d97bfa0611d74576bfa2a784971ed4cdb55b96304c147a8c37ec1192f02elfGafgyt
2025-06-15 22:44:200fdcb40f302c14e4dafd1920d245be7d8e96959db7f3e782d4d978bf7c137893elfGafgyt
2025-06-15 22:42:442e43e965285c710740bf6ebcd9ebc9e0088694e56b71046e1f2a914ce3d42c16elfGafgyt
2025-06-15 22:36:56a6f6d5e3ebc4717bd0f3de1f7691c3726465976c725319e16e915dda6a6fca15elfGafgyt
2025-06-15 22:34:096985b11bffa9efdcc1a532d43918eb85cecbb0afa0855b16bb803db30c9ca781elfGafgyt
2025-06-15 22:34:061b46b6fc083a92202701fff5d05c1423f26c8b33c7045656b54a8010997b825delfGafgyt
2025-06-15 22:30:295e9e62c088819c3cbd05303417c8cb1866968c7259762e35db264cb9e5b379ecelfGafgyt
2025-06-13 19:09:1289aa345b6e71b8bd83a2b72e952a8d932cf892861a45a64c3b45caee8ca3fa28shGafgyt
2025-06-13 19:08:196a4112798bffbfddc0d124ef289584c1b340599794f3dd9918a903ef4201ad18shGafgyt
2025-06-13 19:08:19a3d98562de6535f685a8556488631518aafe3b47cf2ec5a00f175007db890f17shGafgyt
2025-06-13 19:08:1990961ecc89b470b9ddd4f8b82f8a755b13304ac478b9e853dc4c1b217d235911shGafgyt
2025-06-13 19:08:14bde3ef04e5c9ade51844dd0b19487685fea8dd12a6444e576b50eb4e4442e533shGafgyt
2025-06-13 19:08:134b13bb42ca047939568da28acdbd8f59284528c6c72c8b48b0b347fe93bc8c40shGafgyt
2025-06-13 18:52:10d810aee1172b7189eb472fade4c7d24968a30bd7938013e4dab24a6827c2593aelfGafgyt
2025-06-13 18:51:130b143f828aff7469a235aabc874ad0b27d09c131aa72d924a2edc738194943c9elfGafgyt
2025-06-13 18:50:224f2cbb52242909019bef43b0179728a39ff579f29aade60b6fb9f5843bb3f94delfGafgyt
2025-06-13 18:50:2284cf0ed553e21c39d0a8345e2eec29002b489df76f876ea5842be198c531e112elfGafgyt
2025-06-13 18:50:221264a8832da9e1c025dacbea5b61b98c10ae6b19e579b82382469cf57a9a27bcelfGafgyt
2025-06-13 18:50:195f981f7299bc39cfbaf450a6a901e39ada313b106f1d7fed9e01bd41c72a4738elfGafgyt
2025-06-13 18:50:19ad72da442c717ff4d673c498b9a59ba1068eaaab35d787400b36b6a933d47dd3elfGafgyt
2025-06-13 18:50:19230585b224c070247f37ce6c1b0aa3405a4b4f79ca750bd1f309f1d06090869delfGafgyt
2025-06-13 18:50:192d5abf4eb00cc6440b511b260e2db161218f6b40c5ee55e5ddb1b17b7154fcbeelfGafgyt
2025-06-13 18:50:18cc39e46e983daadb8c04c96be533cea97ef79966567ec625dead6c74bfd35ab5elfGafgyt
2025-06-13 18:50:1836692e31cbb89413835b7132bd963a63cb36c541ba8db5cc4b8350b9473713bbelfGafgyt
2025-06-13 18:50:18f2463e46daafd068a312aa241baa4622a0cb2bdd6ed45ef1ef645f76dc5042e4elfGafgyt
2025-06-13 18:49:137849a41a7a6c414bc96ddc7df4e6afd20bd0f2237d907522f858bfc53a607f04shGafgyt
2025-06-13 12:00:14e4be7d6c5c1d15011342508e5705f72de5c8772c2ebff218c02cf3ec79f29311elfGafgyt