🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 109.116.81.206
Firstseen:2022-08-15 01:51:03 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-08-15 01:51:15 109.116.81.206net-109-116-81-206.cust.vodafonedsl.itNot listedAS30722 VODAFONE-IT-ASN- ITyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-08-15 01:51:15http://109.116.81.206:57205/.iOfflinehajime geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-09-14 05:59:118e8df69ec38c57abf163fee320cdcdd992344613b33ce7abadf5b984dab1aa34elf  
2023-09-12 03:57:2588173fcdbde821ab56976201c3fb472be957e7d0a4eb2641dcbc74ac1e9ba00belf  
2023-08-03 21:14:4404e240998978e98aee956b75ccfd0fc104920b52255efb96b2bec37fe2a37972elf  
2023-08-03 07:38:428dd7ae8ee134fa7adf8971a072a164a377b9d49077fc76308465d49dffa01943elf 
2023-08-03 05:27:28750e00a0b20ba083b797e91709b3b026362fc38d6a513384539c9d3fb0d8d896elf  
2023-08-03 02:17:386133cc722734f48d3b93bd9ce409fc9e250673f5330a53be76460ee10a4dc841elf  
2023-08-02 17:27:31232711215bccc47b926702a6b49295e26b12b9f1231d57082bd3cb4f2cbd30f4elf  
2023-08-01 18:52:37271c9443ed80974b0d441760b918bb38110bb0190e68c72654d84293f7f579caelf  
2023-07-30 03:46:37199ab00384d9f5194f7c72d3087b20c1aa43af83fd3594387827c4f14731bdfaelf  
2023-07-27 12:41:350f31f2ba7205045826ce577df3a166af429af75b8fba6d4b7346cf37c48e730delf  
2023-07-19 07:38:55e95c6a9e06525f2909a4170864884201864a1a7bf9dea539fba63ad235136191elf  
2023-07-16 20:43:191e60e090325757a855276d839d05d32043c86742f0298b8beada3c9dc2e37347elf  
2023-07-16 09:03:08be41290f2d9ed081716cfb413d210c798bc1d2f89c810e81e98666acd25b24ccelf  
2023-07-14 20:31:01d1644d4136e9b2b7d31c5e9d09b411edaca9629ae6169e91ee78429518977beaelf  
2023-07-14 19:28:5831e769170c254133c8389df24948f98f47dc8495dd09cdc10c2ea54887e53a74elf  
2022-11-04 14:26:47a7969f6e3271b52409a22afa1397424dce8cc88d59915210654b597ea694800delf  
2022-10-21 02:27:17fc9e2e393b34ff7195dd995275ca2e6410d5b52f92fad3888d9a9562adcbb4a4elf  
2022-09-06 07:17:5071896b0b9302f3725cdceac7f59bc6dc40d67f55eb1a9c38a0adc1e5f795fe38elf  
2022-08-15 04:28:4959a6cc56c0cef5e3023de14ad536b5424d7fcc5dbbb2e7625145965a1118d4f4elf  
2022-08-15 01:51:15a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3elfHajime