URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 87.121.79.201 |
|---|---|
| Firstseen: | 2026-04-29 16:03:04 UTC |
| Total malware sites : | 12 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 12 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-04-29 16:03:17 | 87.121.79.201 | SBL679671 | AS199428 AlvaroNavas |  BG | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-04-29 16:03:18 | 20330a19551567abbba5bef70e63f5c2643aa3780b0c8ff211d3901ef2671a7d | elf | Gafgyt | |
| 2026-04-29 16:03:18 | b36ba9a8fd989e2a6d02b11e2ba872019a6591b72d654f252f19066d9e12d5de | elf | Gafgyt | |
| 2026-04-29 16:03:18 | d90f57e3e9fb1c25456395be2feedc40ea8d9cc469c6272e7f71065770796661 | elf | Gafgyt | |
| 2026-04-29 16:03:18 | 4cb8c9d5973885f0a60e8cf2ce5b7ec2e6caa118388d26ddf78db5db5fbadb3f | elf | Gafgyt | |
| 2026-04-29 16:03:18 | 26449195ce8015a47c6477c461fa1e1d1bcb2b9f27948fc6bca0bacb200457d1 | elf | Gafgyt | |
| 2026-04-29 16:03:18 | d90f57e3e9fb1c25456395be2feedc40ea8d9cc469c6272e7f71065770796661 | elf | Gafgyt | |
| 2026-04-29 16:03:18 | d1a795bbf8e456f036885c209adf2e9c8c71a4325fe43e08bb91823413e86b00 | elf | Gafgyt | |
| 2026-04-29 16:03:18 | 0109239f186713152a7bae70350fbadd695f61c0bb1f427f8325a1b464fc8080 | elf | Gafgyt |