URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 31.56.19.114 |
|---|---|
| Firstseen: | 2026-10-27 05:49:05 UTC |
| Total malware sites : | 9 |
| Online malware sites : | 9 (100%) |
| Offline Malware sites : | 0 (0%) |
| Newest active malware site : | 2026-10-27 05:49:46 UTC |
| Oldest active malware site : | 2026-10-27 05:49:19 UTC (Age: 12 days, 2 hours, 28 minutes) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-10-27 05:49:19 | 31.56.19.114 | SBL699501 | AS403005 BLATANTHOST | AE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-10-27 05:49:46 | http://31.56.19.114/hidakibest.arm6 | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:40 | http://31.56.19.114/hidakibest.ppc | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:29 | http://31.56.19.114/hidakibest.sparc | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:26 | http://31.56.19.114/hidakibest.arm7 | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:24 | http://31.56.19.114/hidakibest.x86 | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:20 | http://31.56.19.114/hidakibest.arm5 | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:19 | http://31.56.19.114/hidakibest.mpsl | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:19 | http://31.56.19.114/hidakibest.mips | Online | 31-56-19-114 elf gafgyt | |
| 2026-10-27 05:49:19 | http://31.56.19.114/hidakibest.arm4 | Online | 31-56-19-114 elf gafgyt |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-10-27 05:49:46 | fbbaf33e8a5539c8842d3e5584a7814eaba87ff7b8ce75f2f04da91269a795f4 | elf | Gafgyt | |
| 2026-10-27 05:49:39 | 72187a9ba1aab85d981b40ba2f9283c39c49de08d4c87a571325220b5c4f6a3c | elf | Gafgyt | |
| 2026-10-27 05:49:29 | ec4ff73358e7bf2430874bd72f6c87f631e3ac4ebe73d39e3ec2f97c11589b06 | elf | Gafgyt | |
| 2026-10-27 05:49:26 | 7723fe4b9f33a9e9cf1e7476977ee0e1de56f23a55e83a20678122d0a281332e | elf | Gafgyt | |
| 2026-10-27 05:49:24 | 14de1483c40d257672b0d6e27ee54f40993e4a36ecec6524b4f3f5adf636f477 | elf | Gafgyt | |
| 2026-10-27 05:49:19 | 2037e7ee9390ba2bf6374abb4cc6566e061bcd6ee5ae1150e04f69780ac8f3e2 | elf | Gafgyt | |
| 2026-10-27 05:49:19 | 4396a451ebd0e7ae8eba7f6772dc2db2aba1e3af0ed9391d7910ba2ef3670925 | elf | Gafgyt | |
| 2026-10-27 05:49:19 | dd61a80a94b53298c128dee18789890100bda578421fe23f338e8c1a5e912623 | elf | Gafgyt | |
| 2026-10-27 05:49:18 | 15594bc2f1025894a2d4c68f3b5ed2b534a68f6432d7e0b7294874dade64d469 | elf | Gafgyt |
AE