🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 201.79.43.222
Firstseen:2026-11-03 20:26:06 UTC
Total malware sites :13
Online malware sites :12 (92%)
Offline Malware sites :1 (8%)
Newest active malware site :2026-11-08 11:55:09 UTC
Oldest active malware site :2026-11-03 20:26:10 UTC (Age: 4 days, 19 hours, 40 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-11-03 20:26:10 201.79.43.222Not listedAS14061 DIGITALOCEAN-ASN- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-11-08 11:55:09http://201.79.43.222/arm5Onlineelf ua-wget ClearlyNotB
2026-11-08 05:02:13http://201.79.43.222/x86_64Onlineelf ua-wget ClearlyNotB
2026-11-08 05:02:13http://201.79.43.222/m68kOnlineelf ua-wget ClearlyNotB
2026-11-08 05:02:13http://201.79.43.222/x86Onlineelf ua-wget ClearlyNotB
2026-11-08 05:02:13http://201.79.43.222/mipselOnlineelf ua-wget ClearlyNotB
2026-11-08 05:02:13http://201.79.43.222/arm6Onlineelf ua-wget ClearlyNotB
2026-11-08 05:02:13http://201.79.43.222/armOnlineelf ua-wget ClearlyNotB
2026-11-08 05:02:13http://201.79.43.222/mipsOnlineelf ua-wget ClearlyNotB
2026-11-03 20:26:12http://201.79.43.222/bot.x86_64Onlineelf mirai ext ua-wget ClearlyNotB
2026-11-03 20:26:12http://201.79.43.222/ppcOnlineelf mirai ext ua-wget ClearlyNotB
2026-11-03 20:26:10http://201.79.43.222/arm7Onlineelf mirai ext ua-wget ClearlyNotB
2026-11-03 20:26:10http://201.79.43.222/mips64Onlineelf mirai ext ua-wget ClearlyNotB
2026-11-03 20:26:10http://201.79.43.222/bot.armOfflineelf mirai ext ua-wget ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-11-08 14:35:529a6220256b828b7526ff1a6a6ea6140635e0cf9fc38d830127e84bb81c849c0delf 
2026-11-08 13:22:22c3ab71ae08690960ac0fcf7eb0430fafd0c4feb27f43bec8e5dd6268840c0659elf 
2026-11-08 11:55:09a43d17cf772559cd23df743e8d3b40eeffb80643d0a00c53775f0f2d2f6fc8a5elf 
2026-11-08 11:36:49b25dfe2bf31618bccfe976abddf5bf44163c93f75666e84b780986689d5e1aefelf 
2026-11-08 05:02:13e6df15e070fe529fce5d14af5ab4e3a78055b97828ec8f9d80cc8e132d08b6e4elf 
2026-11-08 05:02:135d5c8f889b734f3827eea79187d246e79d6001c5316f26fc043bc15e2eb72f0felf 
2026-11-08 05:02:139260f834480937e458ca9772e32abc8e1f02ba393c2860ebaf725ecf5fc5a4bcelf 
2026-11-08 05:02:13102369711ea9b88ac3c35a70895b04e2278865e167841f835fba0d96c0d70c6celf 
2026-11-08 05:02:1335882ccb1adfa5d45dd73dd2cebbd63e31e9a63bafbe23aa03fac13c57dc6e3felf 
2026-11-08 05:02:13ba6e9414061b2a3bfd87bac027d5dd0a2118d872c2e76896ac544824ad7f3278elf 
2026-11-08 05:02:13b2fe11b977bea36950dbe7accae8dc38a3e20684ff03cb746453c445717e96b6elf 
2026-11-08 01:22:32e6df15e070fe529fce5d14af5ab4e3a78055b97828ec8f9d80cc8e132d08b6e4elf 
2026-11-08 00:57:277cba07e1d0860ae723d811099a372b2c7fb256457b62289db5f7c1ad69d6f031elf 
2026-11-03 20:26:1222fa73e3f0eee1baa46631737ec7e5ac3b425346949da44b78f7ddfe161ad7d1elfMirai
2026-11-03 20:26:11ee57ea3a74e03531340825e23245ca219c39717016ce97775522a4523c0d2f37elfMirai
2026-11-03 20:26:106c4f8e15f87276d81dbc6373b8f1231f27718f876a09bf81d8b2a37933d20b91elfMirai
2026-11-03 20:26:1018cdfe1c0cdd15ed7af29dcbe38e23853676ba7f7ec890cd0d344813f9f121a3elfMirai
2026-11-03 20:26:105a10ed35c77ace0f64d150d54d00bce7c3bab7c1022f57315ce25a9097339df3elfMirai