URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 176.65.149.4
Firstseen:2025-12-09 02:40:05 UTC
Total malware sites :16
Online malware sites :0 (0%)
Offline Malware sites :16 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-09 02:40:09 176.65.149.4176.65.149.4.ptr.pfcloud.networkSBL679274AS51396 PFCLOUD- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-12-09 11:56:23http://176.65.149.4/bins/Demon.x86_64Offlineelf ua-wget abuse_ch
2025-12-09 11:56:23http://176.65.149.4/bins/Demon.armOfflineelf ua-wget abuse_ch
2025-12-09 11:56:23http://176.65.149.4/bins/Demon.spcOfflineelf ua-wget abuse_ch
2025-12-09 02:41:05http://176.65.149.4/bins.shOfflinegeofenced mirai ext sh ua-wget USA botnetkiller
2025-12-09 02:40:19http://176.65.149.4/bins/Demon.sh4Offlineelf gafgyt ext geofenced mirai ext SuperH ua-wget USA botnetkiller
2025-12-09 02:40:17http://176.65.149.4/bins/Demon.arm6Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-12-09 02:40:14http://176.65.149.4/bins/Demon.mipsOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-12-09 02:40:13http://176.65.149.4/bins/Demon.arm5Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-12-09 02:40:13http://176.65.149.4/bins/Demon.ppcOfflineelf gafgyt ext geofenced mirai ext PowerPC ua-wget USA botnetkiller
2025-12-09 02:40:13http://176.65.149.4/bins/Demon.arm7Offlinearm elf geofenced mirai ext ua-wget USA botnetkiller
2025-12-09 02:40:12http://176.65.149.4/bins/Demon.m68kOfflineelf gafgyt ext geofenced m68k mirai ext ua-wget USA botnetkiller
2025-12-09 02:40:11http://176.65.149.4/wget.shOfflinegeofenced mirai ext sh ua-wget USA botnetkiller
2025-12-09 02:40:11http://176.65.149.4/bins/Demon.mpslOfflineelf geofenced mips mirai ext ua-wget USA botnetkiller
2025-12-09 02:40:11http://176.65.149.4/bins/Demon.x86Offlineelf geofenced mirai ext ua-wget USA x86 botnetkiller
2025-12-09 02:40:09http://176.65.149.4/c.shOfflinegeofenced sh ua-wget USA botnetkiller
2025-12-09 02:40:09http://176.65.149.4/w.shOfflinegeofenced mirai ext sh ua-wget USA botnetkiller