URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 139.59.247.208
Firstseen:2025-11-18 17:32:05 UTC
Total malware sites :32
Online malware sites :0 (0%)
Offline Malware sites :32 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-11-18 17:32:15 139.59.247.208Not listedAS14061 DIGITALOCEAN-ASN- SGyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-11-19 08:40:27http://139.59.247.208/x86Offlineelf ua-wget abuse_ch
2025-11-19 08:40:27http://139.59.247.208/ppcOfflineelf ua-wget abuse_ch
2025-11-19 08:40:27http://139.59.247.208/mipsOfflineelf ua-wget abuse_ch
2025-11-19 08:40:27http://139.59.247.208/windyloveyou/windy.i468Offlineelf ua-wget abuse_ch
2025-11-19 08:40:26http://139.59.247.208/spcOfflineelf ua-wget abuse_ch
2025-11-19 08:40:26http://139.59.247.208/x86_64Offlineelf ua-wget abuse_ch
2025-11-19 08:40:21http://139.59.247.208/arm7Offlineelf ua-wget abuse_ch
2025-11-19 08:40:21http://139.59.247.208/sh4Offlineelf ua-wget abuse_ch
2025-11-19 08:40:21http://139.59.247.208/armOfflineelf ua-wget abuse_ch
2025-11-19 08:40:21http://139.59.247.208/mpslOfflineelf ua-wget abuse_ch
2025-11-19 08:40:21http://139.59.247.208/arm6Offlineelf ua-wget abuse_ch
2025-11-19 08:40:20http://139.59.247.208/arm5Offlineelf ua-wget abuse_ch
2025-11-19 08:40:20http://139.59.247.208/m68kOfflineelf ua-wget abuse_ch
2025-11-18 17:32:23http://139.59.247.208/c.shOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:22http://139.59.247.208/w.shOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:20http://139.59.247.208/windyloveyou/debugOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:19http://139.59.247.208/windyloveyou/windy.spcOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:16http://139.59.247.208/windyloveyou/windy.arm6Offlinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:16http://139.59.247.208/windyloveyou/windy.mipsOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:16http://139.59.247.208/windyloveyou/windy.ppcOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.i686Offlinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.m68kOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.x86Offlinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.arcOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.armOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.sh4Offlinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.mpslOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/wget.shOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.arm5Offlinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/1.shOfflinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.arm7Offlinemirai ext opendir DaveLikesMalwre
2025-11-18 17:32:15http://139.59.247.208/windyloveyou/windy.x86_64Offlinemirai ext opendir DaveLikesMalwre

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-11-18 17:32:236d138a98eba358f9eaf2ed87a360abb6d03a1710a83f814808db4ab63d089620shMirai
2025-11-18 17:32:228431acc660eb60044fe07b0404e24e06c664286337893e29a9cd30f867280b43shMirai
2025-11-18 17:32:19bdef68d2634e47b04b7011ad505692bcbaa6076c169ec5401e6698e8e64010c7elfMirai
2025-11-18 17:32:199002671c1d691803fb24bcb8292a58004569f8e584b18bd7a64082bdab495fd5elfMirai
2025-11-18 17:32:163e34149ef68f83ee3af7a5592e6fa7ae578b760414bd3d7a0b16b9bd035c0174elfMirai
2025-11-18 17:32:150416c8bef32589f967b99afb6d0f6d732b92c2d2bd175b946d086d36436cd2a3elfMirai
2025-11-18 17:32:15bf6b0faaecbe04385340f224de3878b9c8bb69bfce1fd3b0e3e8a0c32b99531aelfMirai
2025-11-18 17:32:15658d3203fb16ac1857f399618e8db9d9717279d8b174592141d34ac5a2b0dd55elfMirai
2025-11-18 17:32:150062dfafcf30a95d5b30831430ff57a33ba8206e3e843181f25359a0c10a820delfMirai
2025-11-18 17:32:153fc03da2b086a20cfeb572fe0eecdf99cd79cc0b5912ea1d9aa44090dcc0f9e6elfMirai
2025-11-18 17:32:15987e6b9f0ce922f2619394e636cbfc43974b95dd1c62c38bb7edbbaf503884afelfMirai
2025-11-18 17:32:1524ab0d2047629177539560dd033a45ada43f485e2b3426e34a00948054c867d0elfMirai
2025-11-18 17:32:152601f3cd730b34172d36924782bd0ff2df0e83bdb2e8641d4cd156ca3642ea59elfMirai
2025-11-18 17:32:1588d3efe82716b0c7f4c8d638fad7de418a42f978f03b7448637041a30825f98celfMirai
2025-11-18 17:32:15a13ee7d61053af6534c6988753f783133c81bab6c662587d9521d6439a75e85eshMirai
2025-11-18 17:32:15dcf780bc56623e229c45ba994ed1715d08a3819d42df6c327edb4cade2e9c1c4elfMirai
2025-11-18 17:32:156102e531a7c1c7d2a52fb6294a86a7d9da5b48dcde8a191f0b7bd6c7deb1bdbeshMirai
2025-11-18 17:32:15125f69fac702b60a35ab6198e07a17ad7991a4b438a136d8a599b71e0231954belfMirai
2025-11-18 17:32:15603d383dd003b84b3dec04e84a9d89449c647442e687b633850401abc73661d0elfMirai