🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 185.117.91.6
Firstseen:2026-10-14 07:38:05 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-14 07:38:17 185.117.91.6Not listedAS59711 HZ-EU-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-10-14 07:38:22http://185.117.91.6:9999/stress_max_armv7lOfflinebotnet elf gafgyt ext mirai ext z3r0s6
2026-10-14 07:38:21http://185.117.91.6:9999/c2_serverOfflinebotnet elf gafgyt ext mirai ext z3r0s6
2026-10-14 07:38:21http://185.117.91.6:9999/bot_client_armv7lOfflinebotnet elf gafgyt ext mirai ext z3r0s6
2026-10-14 07:38:21http://185.117.91.6:9999/armv7Offlinebotnet elf gafgyt ext mirai ext z3r0s6
2026-10-14 07:38:17http://185.117.91.6:9999/bot.arm7Offlinebotnet elf gafgyt ext mirai ext z3r0s6

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-10-14 07:38:2147f831411856e1523ff9ad36f02e16ac5ac57682002ff54ad917877e4601ce3aelf  
2026-10-14 07:38:2104ab1b6de2f52ab72d8cadfb531fcf41da768df374530759a7002a204d564e34elf  
2026-10-14 07:38:21a0a83645ea73296ffea3f2ab3562ff3c9b95f33b6d25c5d1579f56b15e6ba90delf  
2026-10-14 07:38:217a65172b9a59f8d7e958871a5e55f215f32bb17d8ec4e167c891373f83669973elf  
2026-10-14 07:38:17c869584f3e17fdde01a26bdf58d92837d8f396aad9944dffb08627c1f7e1323felf