URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 104.251.181.69
Firstseen:2026-06-17 02:24:07 UTC
Total malware sites :18
Online malware sites :0 (0%)
Offline Malware sites :18 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-06-17 02:24:18 104.251.181.69SBL697039AS402253 SKN-NETWORK-1- CHyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-06-17 07:57:12http://104.251.181.69/arm_softOfflinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:12http://104.251.181.69/armOfflinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:12http://104.251.181.69/mipsOfflinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:12http://104.251.181.69/i686Offlinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/arm_soft3Offlinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/ppcOfflinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/m68k2Offlinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/ppc2Offlinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/mipselOfflinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/m68kOfflinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/mipsel2Offlinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/arm_soft2Offlinegafgyt ext ua-wget abuse_ch
2026-06-17 07:57:11http://104.251.181.69/x86Offlinegafgyt ext ua-wget abuse_ch
2026-06-17 02:26:13http://104.251.181.69/ntpdOffline104-251-181-69 elf gafgyt ext BlinkzSec
2026-06-17 02:25:31http://104.251.181.69/sshdOffline104-251-181-69 elf gafgyt ext BlinkzSec
2026-06-17 02:25:21http://104.251.181.69/wgetOffline104-251-181-69 elf gafgyt ext BlinkzSec
2026-06-17 02:25:21http://104.251.181.69/bins.shOffline104-251-181-69 gafgyt ext sh BlinkzSec
2026-06-17 02:24:18http://104.251.181.69/tftpOffline104-251-181-69 elf gafgyt ext BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-06-17 07:57:126c4923651f5cd4b32ea739093d6dc3b7d3bef9f518c22065e700bd0055a45105elfGafgyt
2026-06-17 07:57:12f852c66455c6052ebe591bc72749b0271f94cf79ea359c88c296d467ff4c89fdelfGafgyt
2026-06-17 07:57:12ce03d86201c0fbdb424b2e876bcc3a2b7334db569c4875d865d32d26b7bd28ebelfGafgyt
2026-06-17 07:57:116c4923651f5cd4b32ea739093d6dc3b7d3bef9f518c22065e700bd0055a45105elfGafgyt
2026-06-17 07:57:114d2f413c8643e625e85f9375fd4e7676b2ca70e5428b87b33eff1d77dce89bcfelfGafgyt
2026-06-17 07:57:11272171b2481e697241fcf3af76bac82c134c164dc27f2c8cb68427437cbfd578elfGafgyt
2026-06-17 07:57:11c5419b674821dfe6c23762d3cc73d655ee74f3ed5ee87e72b1c4e481225bce1aelfGafgyt
2026-06-17 07:57:11272171b2481e697241fcf3af76bac82c134c164dc27f2c8cb68427437cbfd578elfGafgyt
2026-06-17 07:57:11ff254660afde31c1e79d6e71c6af99ad976e176edcd8d0ea0fdf49b0d25436eeelfGafgyt
2026-06-17 07:57:11c5419b674821dfe6c23762d3cc73d655ee74f3ed5ee87e72b1c4e481225bce1aelfGafgyt
2026-06-17 07:57:11ff254660afde31c1e79d6e71c6af99ad976e176edcd8d0ea0fdf49b0d25436eeelfGafgyt
2026-06-17 07:57:116c4923651f5cd4b32ea739093d6dc3b7d3bef9f518c22065e700bd0055a45105elfGafgyt
2026-06-17 07:57:11d84565a8008bdef0c2dae7c57e2d280ff6c6dc57307695a961364d7d8895f1deelfGafgyt
2026-06-17 02:26:1386e34b74d026e92ffb78ccae015717cf3f1ea198eb3b4c93f59602d2e4473f69elfGafgyt
2026-06-17 02:25:318abe32af404a4ac4b81ddcee7fa36a9f8ce8fff137a6610bc0c82bb5c3bbc08delfGafgyt
2026-06-17 02:25:21624cf70d7a16f5cfff690424ba1daf62c8c407f7aa62e72be9da784c4e714e28elfGafgyt
2026-06-17 02:25:21fa2fe8d31160e1b3b3c684c49c11749a7c638199f1e84125ea5d712b8f666af0shGafgyt
2026-06-17 02:24:1821bce6b5ad6a7cdf83ba83060d2d3665876921852879c3519dd027482a172f50elfGafgyt