The host at this IP address is currently being used to distribute malware.
Malware distribution located here:
hXXp://81.163.30.181/111.exe
$ nslookup 81.163.30.181
vps96216.af.lojaebooky.com
Referencing malware binaries (MD5 hash):
32cc6ad0e7d507258071b7c0e551720b — AV detection: 20 / 60 (33.33)
471779b638cfa1c797ed8207fa814612 — AV detection: 23 / 68 (33.82)
4f6b3a98f17a488dfdd4f772f98db4a8 — AV detection: 23 / 66 (34.85)
63a6b243f662c2e36685ee567f20ff1a — AV detection: 24 / 65 (36.92)
7df87d88af2ad7dca96f478682617b1a — AV detection: 25 / 67 (37.31)
7ebf41b7e0d24473f2ad0b25e354f615 — AV detection: 43 / 68 (63.24)
8f70a0f45532261cb4df2800b141551d — AV detection: 37 / 67 (55.22)
9bb8c2398b05475e367347edc42f44ae — AV detection: 8 / 68 (11.76)
a847eec0444ac3d8c6eeb2d9eb306dce — AV detection: 25 / 68 (36.76)
e9953645ba124ff129706f90b03af63f — AV detection: 24 / 66 (36.36)