URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 104.218.236.179
Firstseen:2024-07-21 23:22:04 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-07-21 23:22:12 104.218.236.179s6.aurorasms5.comNot listedAS401539 KLUST-US-DE1- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-07-21 23:22:12http://104.218.236.179/p.txtOfflineelf Xorddos ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-08-11 05:14:370007aa8a69792a6e7fab0cf3078897810ce61a1d15bfdc98509c6aa7b1e99fbcelf  
2024-07-30 16:08:168f5ebb5b1c09744b4bb0087dca66360530533a1913151eaa04f17b691aae5a6belf  
2024-07-27 05:14:3175bfd448e4274cc4e5804c43768f62a36ccb3fc3b1df06e14d9c892daa2cde19elfXorDDoS
2024-07-21 23:22:12d360716cab46152dedb9c0b7179d1dc36fc8040be312cf62f76229d1d3145bd7elf