URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 176.65.139.61
Firstseen:2026-05-01 11:42:06 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-05-01 11:42:15 176.65.139.61SBL679274AS214472 STORMINDUSTRIES- LUyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-05-02 15:38:17http://176.65.139.61/cat.shOffline176-65-139-61 mirai ext sh ua-wget BlinkzSec
2026-05-02 15:38:17http://176.65.139.61/iran.mipsrouterOffline176-65-139-61 elf mirai ext ua-wget BlinkzSec
2026-05-02 15:38:05http://176.65.139.61/shOffline176-65-139-61 ua-wget BlinkzSec
2026-05-01 11:42:24http://176.65.139.61/iran.m68kOfflineelf mirai ext tolisec
2026-05-01 11:42:23http://176.65.139.61/iran.sh4Offlineelf mirai ext tolisec
2026-05-01 11:42:23http://176.65.139.61/iran.armv7lOfflineelf mirai ext tolisec
2026-05-01 11:42:23http://176.65.139.61/iran.i486Offlineelf mirai ext tolisec
2026-05-01 11:42:19http://176.65.139.61/iran.mipselOfflineelf mirai ext tolisec
2026-05-01 11:42:19http://176.65.139.61/iran.mipsOfflineelf mirai ext tolisec
2026-05-01 11:42:19http://176.65.139.61/iran.arcOfflineelf mirai ext tolisec
2026-05-01 11:42:19http://176.65.139.61/iran.x86_64Offlineelf mirai ext tolisec
2026-05-01 11:42:19http://176.65.139.61/iran.armv4lOfflineelf mirai ext tolisec
2026-05-01 11:42:19http://176.65.139.61/iran.sparcOfflineelf mirai ext tolisec
2026-05-01 11:42:15http://176.65.139.61/iran.powerpcOfflineelf mirai ext tolisec
2026-05-01 11:42:15http://176.65.139.61/iran.aarch64Offlineelf mirai ext tolisec
2026-05-01 11:42:15http://176.65.139.61/iran.armv6lOfflineelf mirai ext tolisec
2026-05-01 11:42:15http://176.65.139.61/iran.armv5lOfflineelf mirai ext tolisec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-05-02 15:38:177c139b7c266adde3ab9ce8f4c9f8369a0a94f6c82d3503cdfeb2367a5a9fea0celfMirai
2026-05-02 15:38:17f95b5445eff32c2d2ee41a40907d6cde8cf7385b07ad81e9f1a368610d39b26ashMirai
2026-05-01 11:42:240ed3477d45990d119a3dfcca82b3845fbca552353067c422d22756a1d78de8c5elfMirai
2026-05-01 11:42:23ad3c56147eb28ac0a8a1a7cf9013078544a01392440f9fd40c33120b73255435elfMirai
2026-05-01 11:42:23e818ec5958fe9544afce9c022501eb4306384006398ac4c7d11d94eb9cc857ccelfMirai
2026-05-01 11:42:23c7408052b5f611befa35550f257f9e404021231e073ed5aa3211779543aaf89eelfMirai
2026-05-01 11:42:19481faa99627564c29ad50a7a24547a6ffcc84c4c2820f0135d4472672b79faaaelfMirai
2026-05-01 11:42:19dd9632725e81b851b0fc50e3d819ab542f1463a94001f0590650eab5f6c2e89belfMirai
2026-05-01 11:42:190467c2e50e5accdb94e0f72cc4bae1cd212c9d939b24c785768fa87f62e3c2daelfMirai
2026-05-01 11:42:191728882748391ea49a8754360475cd70dbbef993f0910abab330d239fb702c4aelfMirai
2026-05-01 11:42:19becf7c77ee305b1ce587a41b1d7d8d97397ae1ca65e4f433ba0a16c5b2a83015elfMirai
2026-05-01 11:42:192bacd2a8dea88032cc7ccb40502a14bde367859de9a18ec5d8724337168730ecelfMirai
2026-05-01 11:42:15d460a573d303fd80e57b28aadcc22e61d8b609d5427144a02d3ba237407771e3elfMirai
2026-05-01 11:42:151c17159fa0268c9b377cefcb126562fe53f846e1de129d68037de80d828a4423elfMirai
2026-05-01 11:42:15beff8e365d72a7774e9eb0ea161d56f01a139831fdc9528c78c90473e3654977elfMirai
2026-05-01 11:42:150218fd60627febd0baf123f95545e31bc569ac5ad94cf04b80aeffc12d39fb06elfMirai