URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 165.227.155.54
Firstseen:2026-05-21 20:18:05 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-05-21 20:18:07 165.227.155.54Not listedAS14061 DIGITALOCEAN-ASN- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-05-22 08:26:33http://165.227.155.54/hiddenbin/Space.x86_64Offlineelf ua-wget abuse_ch
2026-05-22 08:26:33http://165.227.155.54/hiddenbin/Space.arm5Offlineelf ua-wget abuse_ch
2026-05-22 08:26:28http://165.227.155.54/hiddenbin/Space.mpslOfflineelf ua-wget abuse_ch
2026-05-22 08:26:27http://165.227.155.54/hiddenbin/Space.i686Offlineelf ua-wget abuse_ch
2026-05-22 08:26:27http://165.227.155.54/hiddenbin/Space.armOfflineelf ua-wget abuse_ch
2026-05-22 08:26:27http://165.227.155.54/hiddenbin/Space.ppcOfflineelf ua-wget abuse_ch
2026-05-22 08:26:26http://165.227.155.54/hiddenbin/Space.m68kOfflineelf ua-wget abuse_ch
2026-05-22 08:26:25http://165.227.155.54/hiddenbin/Space.sh4Offlineelf ua-wget abuse_ch
2026-05-22 08:26:25http://165.227.155.54/hiddenbin/Space.x86Offlineelf ua-wget abuse_ch
2026-05-22 08:26:24http://165.227.155.54/hiddenbin/Space.mips64Offlineelf ua-wget abuse_ch
2026-05-22 08:26:24http://165.227.155.54/hiddenbin/Space.arm6Offlineelf ua-wget abuse_ch
2026-05-22 08:26:24http://165.227.155.54/hiddenbin/Space.sparcOfflineelf ua-wget abuse_ch
2026-05-22 08:26:24http://165.227.155.54/hiddenbin/Space.mipsOfflineelf ua-wget abuse_ch
2026-05-21 20:18:07http://165.227.155.54/hiddenbin/Space.arcOffline165-227-155-54 mirai ext ua-wget BlinkzSec
2026-05-21 20:18:07http://165.227.155.54/hiddenbin/Space.arm7Offline165-227-155-54 mirai ext ua-wget BlinkzSec
2026-05-21 20:18:07http://165.227.155.54/1.shOffline165-227-155-54 mirai ext ua-wget BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-05-21 20:18:06c726fedb10d7a1c8f36ae15601497db81f8b81a04dac6de17b09db6056e8f132elfMirai
2026-05-21 20:18:06e935f85993942729ef9159eacebb7c63c3f7f8d61e2e19479a14f0db1a1f40f6elfMirai
2026-05-21 20:18:061cf11039631b39d06400215e206a2d3d1f02d72a074914c785b923089772cf1cshMirai