URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 163.5.63.97
Firstseen:2025-08-19 03:01:05 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-08-19 03:01:07 163.5.63.97Not listedAS215703 FREAKHOSTING- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-08-19 04:19:14http://163.5.63.97/massOfflinegeofenced mirai ext sh ua-wget USA botnetkiller
2025-08-19 04:19:10http://163.5.63.97/arm7Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-08-19 04:19:10http://163.5.63.97/arm5Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-08-19 04:19:09http://163.5.63.97/sh4Offlineelf geofenced mirai ext SuperH ua-wget USA botnetkiller
2025-08-19 04:19:09http://163.5.63.97/spcOfflineelf geofenced mirai ext sparc ua-wget USA botnetkiller
2025-08-19 04:19:09http://163.5.63.97/arm6Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-08-19 04:19:08http://163.5.63.97/mpslOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-08-19 04:19:08http://163.5.63.97/i686Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2025-08-19 04:19:08http://163.5.63.97/ppcOfflineelf geofenced mirai ext PowerPC ua-wget USA botnetkiller
2025-08-19 04:19:08http://163.5.63.97/m68kOfflineelf geofenced m68k mirai ext ua-wget USA botnetkiller
2025-08-19 04:19:07http://163.5.63.97/x86_64Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2025-08-19 04:19:07http://163.5.63.97/i486Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2025-08-19 04:19:06http://163.5.63.97/yarn.shOfflineascii mirai ext sh ua-wget geenensp
2025-08-19 03:01:22http://163.5.63.97/armOfflinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-08-19 03:01:07http://163.5.63.97/mipsOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-08-19 03:01:07http://163.5.63.97/x86Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-08-19 04:52:2050927a98252378721df7003cee2e116abe0b61c45047bd36260c2ab0917a8d2bshMirai
2025-08-19 04:34:41df05066b7cadbe05a8c6405195cba5033027e398e9a29f25de54ef3d75141da0elfMirai
2025-08-19 04:34:338254501b394b3065c5a118bf01a881a004ff2bda8bbb955093fe80e2d083fa09elfMirai
2025-08-19 04:34:325c922ae55396b31dee3fd10aef13d263c657060ac704d0c2401b3974d93729f3elfMirai
2025-08-19 04:34:30ec360d88a2835d4c91ef7103e48492797269fa084913ecb728735a06d35afe6belfMirai
2025-08-19 04:34:27d0500af0d3967954ca914554d5b0068825eb1939a427b917a6f6fa458597e608elfMirai
2025-08-19 04:34:26d982ba3010e001660742fd90ea600020477952f87de38382205b6221b821bf16elfMirai
2025-08-19 04:34:213fce2302e31fa98a196ada97fee83eb45cc8d9038115d61927bbad54cfb97196elfMirai
2025-08-19 04:34:16c7d74f56d4c9f8ddc45517eeebfb1f07b66acd955b2723c0a0994dbb34dbc830elfMirai
2025-08-19 04:19:14cd3a81b8c3bedc60e78469aa324e3637f684d6e40b60a6aa3b9d4f713f86e495shMirai
2025-08-19 04:19:10e13ad9d0efe2fc524189b97a14f6a6e418f319f5b697a4332d94ddf9e7bd4dedelfMirai
2025-08-19 04:19:103c6d883136783d01fbeff4a1e565c2a466afda20ef9af50a33411c45727b0e0delfMirai
2025-08-19 04:19:0961bf662cc38fbd8cf021b4e2eadb5b1170f2cbdd6087d84ed3153af1ab1d754delfMirai
2025-08-19 04:12:153478189a49771d44287db1b81118e320b6eec9cf1aa2930f9b2e3dc41b60e965elfMirai
2025-08-19 04:12:13929cf9e8fdf4cfe0f5c9de3e3ef5c6ad070ca481cb3b9fbaff9176cb83cf2959elfMirai
2025-08-19 04:11:13bb9c76d1be2784aec3ff807e47f62f87f73c03f63fbbc54d4d98585eda348dbbelfMirai