URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 176.65.132.118 |
|---|---|
| Firstseen: | 2026-02-16 08:05:06 UTC |
| Total malware sites : | 11 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 11 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-02-16 08:05:11 | 176.65.132.118 | SBL679274 | AS51396 PFCLOUD |  DE | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-02-16 12:40:09 | http://176.65.132.118:444/client_armv7 | Offline |  adliwahid | |
| 2026-02-16 12:40:09 | http://176.65.132.118:444/client_mips | Offline | adliwahid | |
| 2026-02-16 12:40:09 | http://176.65.132.118:444/client_x86_64 | Offline | mirai  | adliwahid |
| 2026-02-16 12:40:09 | http://176.65.132.118:444/client_x86 | Offline | adliwahid | |
| 2026-02-16 12:40:09 | http://176.65.132.118:444/client_mipsel | Offline | adliwahid | |
| 2026-02-16 12:40:09 | http://176.65.132.118:444/client_arm64 | Offline | mirai | adliwahid |
| 2026-02-16 12:40:09 | http://176.65.132.118:444/client_ppc64le | Offline | adliwahid | |
| 2026-02-16 12:40:06 | http://176.65.132.118:444/client.x86_64 | Offline | adliwahid | |
| 2026-02-16 12:40:06 | http://176.65.132.118:444/client_armv64 | Offline | adliwahid | |
| 2026-02-16 12:40:06 | http://176.65.132.118:444/client_arm7 | Offline | adliwahid | |
| 2026-02-16 08:05:12 | http://176.65.132.118:444/nigga.sh | Offline | ascii |  geenensp |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-02-16 12:40:09 | e4c455a66fe720855e368e50d49ec6c86ef7cf528ec93c0af978fac998c4f341 | elf | ||
| 2026-02-16 12:40:09 | b1b5eded887a9d4f9eb7a136c6c26ca92860b0f66909a1d1b1c751137b746e49 | elf | ||
| 2026-02-16 12:40:09 | 2c7a58a6e84cf508028885c87b68cd2509b03f544513a2aaa4ba71aa210894ec | elf | Mirai | |
| 2026-02-16 12:40:09 | 85c6940bbad1fb4bea2b213ed832d9f8f8e26cb5d638fb1697c1029184136244 | elf | ||
| 2026-02-16 12:40:09 | 2deccd0197dbbf1fed46c2c4994f6ed421595f03247c199712ce47aeb510615c | elf | ||
| 2026-02-16 12:40:09 | 0e66d814e1bc47e47099b1699d3023487000864ab5e53c3553649a9e38eeb242 | elf | Mirai | |
| 2026-02-16 12:40:09 | 3d5aeed075a61afe7b40086afd3cdebbaa68c4f440bfae1e4e69efb2c2762ee5 | elf |