URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 109.111.55.202
Firstseen:2026-01-23 10:59:28 UTC
Total malware sites :14
Online malware sites :0 (0%)
Offline Malware sites :14 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-01-23 10:59:30 109.111.55.202Not listedAS216075 EtherLinx- FRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-01-23 16:11:17http://109.111.55.202/okOfflinemirai ext sh Tsunami ext ua-wget NDA0E
2026-01-23 16:11:17http://109.111.55.202/ovhOfflineelf mirai ext ua-wget NDA0E
2026-01-23 16:07:13http://109.111.55.202/bashOfflineelf Tsunami ext ua-wget NDA0E
2026-01-23 10:59:34http://109.111.55.202/SupplySrvarm6Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvm68kOfflineelf geofenced m68k mirai ext ua-wget USA botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvspcOfflineelf geofenced mirai ext sparc ua-wget USA botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvx64Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvx86Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvppcOfflineelf geofenced mirai ext PowerPC ua-wget USA botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvmpslOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvmipsOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvsh4Offlineelf geofenced mirai ext SuperH ua-wget USA botnetkiller
2026-01-23 10:59:33http://109.111.55.202/SupplySrvarmOfflinearm elf geofenced mirai ext ua-wget USA botnetkiller
2026-01-23 10:59:30http://109.111.55.202/dockerOfflinegeofenced sh ua-wget USA botnetkiller