URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 65.109.55.181
Firstseen:2026-05-08 14:17:05 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-05-08 14:17:07 65.109.55.181static.181.55.109.65.clients.your-server.deNot listedAS24940 HETZNER-AS- FIyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-05-08 14:17:08http://65.109.55.181:8181/api/autoit-dat?t=af02...Offline abuse_ch
2026-05-08 14:17:07http://65.109.55.181:8181/api/autoit-exe?t=af02...Offline abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-05-11 12:56:05f74d46259af14217bb99f3a6fa4c38abc794e3a8ae403f51f0a05c483c9a98ebunknown  
2026-05-11 12:29:20f2927df82cebbba1de7cc3d1153806788973b808fb03e06c9e2306788608c9a8unknown  
2026-05-10 07:27:59911144c7d49ca12461140eb898a0b8de73ce8fab9443cb4d7a4265579752f9d5unknown  
2026-05-10 01:21:1923483eeab236cd43ddd6fe6cef9151a580717f1b6ab054114bf467076e6c66d3unknown  
2026-05-08 14:17:075d69a932a077fee044b193c28e84564143f5c7e51079ab48e88fef74ab0b77b7exe  
2026-05-08 14:17:0763b9c27f5783c0cb6907b25b528dbdc3e13d823e5442ac5b560541e97f1c7356unknown