URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 137.220.242.60
Firstseen:2026-06-19 11:37:04 UTC
Total malware sites :32
Online malware sites :0 (0%)
Offline Malware sites :32 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-06-19 11:37:07 137.220.242.60SBL669374AS152194 CTGSERVERLIMITED-AS-AP- JPyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-06-24 06:44:37http://137.220.242.60/nshmpslOfflineua-wget botnetkiller
2026-06-24 06:44:37http://137.220.242.60/nshkx86Offlineua-wget botnetkiller
2026-06-24 06:44:37http://137.220.242.60/nsharm5Offlineua-wget botnetkiller
2026-06-24 06:44:37http://137.220.242.60/dbgOfflineua-wget botnetkiller
2026-06-24 06:44:26http://137.220.242.60/arm5Offlineua-wget botnetkiller
2026-06-24 06:44:22http://137.220.242.60/1.shOfflineua-wget botnetkiller
2026-06-24 06:44:22http://137.220.242.60/dropperOfflineua-wget botnetkiller
2026-06-24 06:44:22http://137.220.242.60/ppcOfflineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/mipsOfflineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/mpslOfflineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/nsharm6Offlineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/nshkmipsOfflineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/armOfflineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/nshsh4Offlineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/sh4Offlineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/nshkarm6Offlineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/nsharm7Offlineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/angelaaa.apkOfflineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/nshksh4Offlineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/nshkarm7Offlineua-wget botnetkiller
2026-06-24 06:44:21http://137.220.242.60/arm6Offlineua-wget botnetkiller
2026-06-19 15:58:19http://137.220.242.60/nshx86Offlineelf opendir ua-wget x86 botnetkiller
2026-06-19 15:58:19http://137.220.242.60/nshmipsOfflineelf mips opendir ua-wget botnetkiller
2026-06-19 15:58:19http://137.220.242.60/x86Offlineelf opendir ua-wget x86 botnetkiller
2026-06-19 15:41:21http://137.220.242.60/tp.shOfflineopendir sh ua-wget botnetkiller
2026-06-19 15:41:21http://137.220.242.60/nsharmOfflinearm elf opendir ua-wget botnetkiller
2026-06-19 15:41:21http://137.220.242.60/nshkppcOfflineelf opendir PowerPC ua-wget botnetkiller
2026-06-19 15:41:21http://137.220.242.60/nshppcOfflineelf opendir PowerPC ua-wget botnetkiller
2026-06-19 15:41:20http://137.220.242.60/arm7Offlinearm elf opendir ua-wget botnetkiller
2026-06-19 15:41:20http://137.220.242.60/nshkarmOfflinearm elf opendir ua-wget botnetkiller
2026-06-19 15:41:20http://137.220.242.60/nshkmpslOfflineelf mips opendir ua-wget botnetkiller
2026-06-19 11:37:07http://137.220.242.60/nshkarm5Offlinemirai ext GAYINT_DOT_ORG

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-06-19 11:37:0676226087850f97fe183df4ce812595287c502f07787476000ad485bd7f4b1028elfMirai