URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 176.65.148.144
Firstseen:2025-05-19 21:34:03 UTC
Total malware sites :26
Online malware sites :0 (0%)
Offline Malware sites :26 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-05-19 21:34:07 176.65.148.144hosted-by.pfcloud.ioSBL679274AS51396 PFCLOUD- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-05-30 06:37:06http://176.65.148.144/bins/nova.mipselOfflineelf mirai ext opendir ua-wget botnetkiller
2026-05-30 06:36:05http://176.65.148.144/bins/nova.powerpcOfflineelf mirai ext opendir ua-wget botnetkiller
2026-05-30 06:35:20http://176.65.148.144/bins/nova.armv6lOffline botnetkiller
2026-05-30 06:35:20http://176.65.148.144/bins/nova.armv5lOffline botnetkiller
2026-05-30 06:35:20http://176.65.148.144/bins/nova.sh4Offline botnetkiller
2026-05-30 06:35:08http://176.65.148.144/bins/nova.x86_64Offlineelf mirai ext opendir ua-wget botnetkiller
2026-05-30 06:35:07http://176.65.148.144/bins/nova.armv7lOfflineelf mirai ext opendir ua-wget botnetkiller
2026-05-30 06:35:07http://176.65.148.144/bins/nova.armv4lOffline botnetkiller
2026-05-30 06:35:07http://176.65.148.144/bins/nova.mipsOfflineelf mirai ext opendir ua-wget botnetkiller
2026-05-30 06:35:07http://176.65.148.144/bins/nova.i586Offlineelf mirai ext opendir ua-wget botnetkiller
2025-05-21 07:46:33http://176.65.148.144/hiddenbin/boatnet.i686Offlineelf ua-wget abuse_ch
2025-05-21 07:46:33http://176.65.148.144/hiddenbin/boatnet.x86_64Offlineelf ua-wget abuse_ch
2025-05-21 07:46:33http://176.65.148.144/hiddenbin/boatnet.i468Offlineelf ua-wget abuse_ch
2025-05-20 06:10:05http://176.65.148.144/hiddenbin/boatnet.arcOfflinemirai ext opendir DaveLikesMalwre
2025-05-20 06:09:05http://176.65.148.144/hiddenbin/boatnet.spcOfflinemirai ext opendir DaveLikesMalwre
2025-05-20 06:09:04http://176.65.148.144/ohshit.shOfflinemirai ext opendir DaveLikesMalwre
2025-05-19 21:35:07http://176.65.148.144/hiddenbin/boatnet.x86Offlineelf mirai ext tolisec
2025-05-19 21:34:08http://176.65.148.144/hiddenbin/boatnet.arm7Offlineelf mirai ext tolisec
2025-05-19 21:34:08http://176.65.148.144/hiddenbin/boatnet.m68kOfflineelf mirai ext tolisec
2025-05-19 21:34:08http://176.65.148.144/hiddenbin/boatnet.arm5Offlineelf mirai ext tolisec
2025-05-19 21:34:08http://176.65.148.144/hiddenbin/boatnet.arm6Offlineelf mirai ext tolisec
2025-05-19 21:34:07http://176.65.148.144/hiddenbin/boatnet.armOfflineelf mirai ext tolisec
2025-05-19 21:34:07http://176.65.148.144/hiddenbin/boatnet.ppcOfflineelf mirai ext tolisec
2025-05-19 21:34:07http://176.65.148.144/hiddenbin/boatnet.sh4Offlineelf mirai ext tolisec
2025-05-19 21:34:07http://176.65.148.144/hiddenbin/boatnet.mpslOfflineelf mirai ext tolisec
2025-05-19 21:34:07http://176.65.148.144/hiddenbin/boatnet.mipsOfflineelf mirai ext tolisec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-05-30 06:37:06d9777316203d177bded4171dd47a26f849e4e015b4ae77f58e7db483b12a5b5aelfMirai
2026-05-30 06:36:047995f396d3e8aea9a09e28556601a5406aba5e4b5047978b34e2ec5c6397a31felfMirai
2026-05-30 06:35:0847a851ea2349df254759f03968604f61484625cbc731c0fa8de7f94cb85cc477elfMirai
2026-05-30 06:35:07fea2c44402f1b5c9b4040ce3c318108113db4180eeccd9b7ea61d760b311cd0belfMirai
2026-05-30 06:35:07770654eb6223efe3af8a89cb89e3a301b9d6985853f3524b09a71ac1d767e01aelf 
2026-05-30 06:35:0735090f8a88fbb736c34be839090d11282a5390e37159cbacc3eb3c657b099c04elfMirai
2026-05-30 06:35:07607692636aec766af43c0e9e3a7e671e7c3e9369f63b3bcd267da69e75a58e00elfMirai
2025-05-20 06:10:05cddf7b58b2994ce5a8c6d71a0ba91dce7ba891339d4e9d6a961db6c6b5539fb0elfMirai
2025-05-20 06:09:05db02b111e9be01e0f196ddae426c76c393d714a33f3531037623fec7b65f2039elfMirai
2025-05-20 06:09:041d1e459887aa88efa25898f9cddfe50a8209ce3780400a89a7e12d53f7751b25shMirai
2025-05-19 21:35:06b16db86ba74f687b20562c141fc59226cc94a4d846ca3b0af96536c9eb5c4b4celfMirai
2025-05-19 21:34:08204b86be3ae1f8740053ad1403cb0edd41f92655dc3fa26e27ba856035e35529elfMirai
2025-05-19 21:34:0807519a4bc89c5d76802305b76a2da7bfc7cebb201cb420838d8f1cd6a17032fcelfMirai
2025-05-19 21:34:085cfe7e960f57a753bf0c7747dc2244fe660df0c3210ac7b51a262df582a8d52aelfMirai
2025-05-19 21:34:0864212592c3023e4aff823398da9f10e4c19a2563a3ddaed1da92108572e8a58delfMirai
2025-05-19 21:34:072715e3457e4f874d114e15f13c01497a49b02dd0a0fb5edeb3eb2189cab464a6elfMirai
2025-05-19 21:34:07d5209b920627afd24bb6b98fd2369f6f79f7f00d4549caa93159227ff4c2d07aelfMirai
2025-05-19 21:34:07dc9a3dde9903b9c3dd779c7dc4c23805222c2775ad9bdf54dfeb76c9b5cf200celfMirai
2025-05-19 21:34:07a2112e50430d951433f72e3f808ca026af8f997d4a59ea907822353141cdd06belfMirai
2025-05-19 21:34:07e6810ccaa06f507bb831b7e1a9ac6c42f185ca796b2a151f837613112ad6be8delfMirai