🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 31.56.209.86
Firstseen:2026-10-12 07:46:05 UTC
Total malware sites :15
Online malware sites :10 (67%)
Offline Malware sites :5 (33%)
Newest active malware site :2026-10-14 00:58:17 UTC
Oldest active malware site :2026-10-12 07:46:13 UTC (Age: 3 days, 7 hours, 7 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-10-12 07:46:10 31.56.209.864j59f0byk91w.server.swissnetwork.ioSBL695375AS209373 SWISSNET-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-10-14 00:58:17http://31.56.209.86/armOnlineelf ua-wget ClearlyNotB
2026-10-13 16:22:08http://31.56.209.86/mips64elOnline31-56-209-86 elf ua-wget BlinkzSec
2026-10-13 16:21:14http://31.56.209.86/x86Online31-56-209-86 elf ua-wget BlinkzSec
2026-10-13 16:21:13http://31.56.209.86/dev.shOffline31-56-209-86 sh ua-wget BlinkzSec
2026-10-13 16:21:13http://31.56.209.86/cats.shOffline31-56-209-86 sh ua-wget BlinkzSec
2026-10-13 16:21:13http://31.56.209.86/toto.shOffline31-56-209-86 sh ua-wget BlinkzSec
2026-10-13 16:21:13http://31.56.209.86/kla.shOffline31-56-209-86 sh ua-wget BlinkzSec
2026-10-12 22:34:23http://31.56.209.86/mipsOnlineelf ua-wget ClearlyNotB
2026-10-12 22:34:17http://31.56.209.86/armv7lOnlineelf ua-wget ClearlyNotB
2026-10-12 22:34:17http://31.56.209.86/powerpcOnlineelf ua-wget ClearlyNotB
2026-10-12 22:34:15http://31.56.209.86/mips64Onlineelf ua-wget ClearlyNotB
2026-10-12 22:34:15http://31.56.209.86/aarch64Onlineelf ua-wget ClearlyNotB
2026-10-12 22:34:14http://31.56.209.86/mipselOnlineelf ua-wget ClearlyNotB
2026-10-12 07:46:13http://31.56.209.86/x86_64Onlinedocker elf drewfink
2026-10-12 07:46:10http://31.56.209.86/st_x86_64Offlinedocker elf drewfink

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-10-15 14:26:37c9f7807af2d38267e151356ec38db145f6014e100b134989211321e5737c5ca4elf  
2026-10-15 13:39:13081cba4ea90a4e82db7476b29906b546d822ccf4a453bbf234a23c73823b255delf  
2026-10-15 13:24:3255c3a37165d536c7c83af6ed706212924117277c07987c1def6529cbfc19b06delf  
2026-10-15 13:11:38f0395d3cbe1ff9313f14c102db0803b1b8ac4aa7cc8eaf3c26123a6aea75890belf  
2026-10-15 12:34:402538c962c062638c7ab2562195254a605dc34894c341bf41f2e1b1e388d76d14elf  
2026-10-15 12:12:10d744542a42c4720ad36f1127ee5af5f013f23ae5822cdaae2ff03345f2839594elf  
2026-10-15 11:58:072538c962c062638c7ab2562195254a605dc34894c341bf41f2e1b1e388d76d14elf  
2026-10-15 11:44:49831653f7c74cc040f33a5fe19ab52db17f49c654c401cbd61ce006750ae5864aelf  
2026-10-15 11:39:34773370d194d56f896abfe99c8c42284fd4a83bffc5d236d37c5c62b0b983eb94elf  
2026-10-15 11:37:07d7c41ca9b5ade37e3b6a73480d8e7b9509170d4f63aecc0990b3a32150a03711elf  
2026-10-15 11:34:15e7d35847f1c7021116f08402e873b46925adc89ec3bc8da9f5e73f596f0a4fa1elf  
2026-10-14 00:58:17411ede512aeec86e15ec1e77e1797b78b65fc5ab329a455d2562103e12387e22elf  
2026-10-13 16:43:1580b9ffa8cf6b680313680bace8300fee33858736889afd8043a580d3361f8cbcelf  
2026-10-13 16:22:0864bab3a3a9578b2e0fbbedc513816d566a6398b4f39e9912dab16606d7060279elf  
2026-10-13 16:21:14dd20e4ecd148d750bcb573999748c731815580c35c6793fd31774237668d592belf  
2026-10-13 16:16:32e969bc3538089bc68d3f0b7adde3ed8c89589d7c17e4820f2121fdf760cf8675elf  
2026-10-13 16:03:3964bab3a3a9578b2e0fbbedc513816d566a6398b4f39e9912dab16606d7060279elf  
2026-10-13 15:49:349f49cdc1d880d8ca96dcd61af9b7de75c6a7f7b36d377cfad3da4a52348395cdelf  
2026-10-13 14:14:11e51fb04c6063d255d9e82fb983642aeb044004ad4af0a1b7a0cf4c9e908c69fcelf  
2026-10-13 13:59:5485e8d3c0389974a193e85bd917824855f1a78788e8a3361cf347afdce79e27e0elf  
2026-10-13 13:50:36113ddbddf9a1f6d275d7d08357c35ff8cb8dd4b2442af8832ddd18f1cf88415belf  
2026-10-12 22:34:228aad033f2a8e4275d4a605cd0fcc27910c549c44a9fd8ea8dccfb5ce55923138elf  
2026-10-12 22:34:17c816086928c4b4f7e8292c9ab969aef5216b2509cffa377d4b44dbdaa82eb8ceelf  
2026-10-12 22:34:170c5820c39d9f6c04554753974a60d2961f9ca01c223325921bfd9a73140c4787elf  
2026-10-12 22:34:1516b3fd991a093ceffdc966b2ef67e34e47042af7f27d9096c9ce0d64679820e5elf  
2026-10-12 22:34:153ed5197e70da4d9867e9cf5e1fb414024b46c4c280e540b16214457022045edfelf  
2026-10-12 22:34:1430574b4f719843677899f8a907c4a8b15770eac7ed0ae7a2ee4e70f1901aa146elf  
2026-10-12 13:13:53a3cdb53396a4ab558b427d14a1828989a8ed7c04e1bfa050ce2bfb2dccc8040celf  
2026-10-12 07:46:133ebdb8b4e3da4540fe5fec1cde039cda8e26eaccc303ba527c67705f6a57d324elf