URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 85.239.33.65
Firstseen:2024-04-26 23:11:04 UTC
Total malware sites :22
Online malware sites :0 (0%)
Offline Malware sites :22 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-04-28 11:32:51http://85.239.33.65/mpslOfflineelf gafgyt ext ClearlyNotB
2024-04-27 07:48:12http://85.239.33.65/x86_64Offlineelf BlinkzSec
2024-04-27 07:48:11http://85.239.33.65/mipsOfflineelf gafgyt ext BlinkzSec
2024-04-27 07:48:09http://85.239.33.65/ipcOfflineshell BlinkzSec
2024-04-27 07:48:09http://85.239.33.65/liOfflineshell BlinkzSec
2024-04-27 07:48:09http://85.239.33.65/d.shOfflineshell BlinkzSec
2024-04-27 07:48:08http://85.239.33.65/irzOfflineshell BlinkzSec
2024-04-27 07:48:08http://85.239.33.65/weedOfflineshell BlinkzSec
2024-04-27 07:48:08http://85.239.33.65/c.shOfflineshell BlinkzSec
2024-04-27 07:48:08http://85.239.33.65/linksysOfflineshell BlinkzSec
2024-04-27 07:48:08http://85.239.33.65/z.shOfflineshell BlinkzSec
2024-04-27 07:48:07http://85.239.33.65/jawsOfflineshell BlinkzSec
2024-04-27 07:48:07http://85.239.33.65/bxOfflineshell BlinkzSec
2024-04-27 07:48:07http://85.239.33.65/k.shOfflineshell BlinkzSec
2024-04-27 07:48:06http://85.239.33.65/wget.shOfflineshell BlinkzSec
2024-04-27 07:48:06http://85.239.33.65/w.shOfflineshell BlinkzSec
2024-04-27 07:48:06http://85.239.33.65/goclOfflineshell BlinkzSec
2024-04-27 07:48:06http://85.239.33.65/bOfflineshell BlinkzSec
2024-04-26 23:11:11http://85.239.33.65/arm5Offlineelf gafgyt ext tolisec
2024-04-26 23:11:11http://85.239.33.65/arm4Offlineelf mirai ext tolisec
2024-04-26 23:11:10http://85.239.33.65/arm7Offlineelf tolisec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-04-30 12:43:278efd3d4978939aac6c2786e2390909839d3a3252bd0e3141e84511b3324f06f9elfMirai
2024-04-30 12:38:2623304f2dcd85788a025cd0be611e7308703be939ee28f807c9ea92f7f651c04delfGafgyt
2024-04-30 12:20:49903f5c80b198a38f7cb3935ca9982d73a62f55c4f1fc22d7bd21df4cc132f62delfGafgyt
2024-04-30 12:12:20c84aecad472883b9c198248037fd5436a3f3f94eff3dbcc8c3a095cc21058018elfGafgyt
2024-04-30 09:32:184aa9ed17ff40954cf41b8fe59ad7c7a6fb433d5a60e1c5eb5e611a48df803be2elf  
2024-04-30 09:02:34eeadff322f4786ad4698021ff3b30efe7a5fba79ce9ed49502be7cbec84cc988elf  
2024-04-30 09:02:269c7d9cb292e345fe9f3bb63834dfc3a2c91c758acbaf7ba7ee581a9740436734elf  
2024-04-30 08:56:5457262e59a495e158bd77bfc743676004e724f8ad58321cab2a6acedebc9c539belf  
2024-04-30 08:56:444e799cfd740dfc1e8beacc28f01bbb038ef791916a6e2ef1a314b92a67c7acaeelf  
2024-04-30 08:49:263aafd645db48cfe2dbfb572d21d66bbb0d330f39bdf2343bad35139dc20b4f03elf  
2024-04-28 11:32:51509d90b598a685633784f2380e066966e381b0f85f5791ea0f83e9801e6b51caelf  
2024-04-27 07:48:121242bd40715ba706d2a808afcf45fb21a1fbf801bf70018bebd75030f879a410elf  
2024-04-27 07:48:117d34301153de04af408508f314be861ef6f8b9c292649b454ecad4aa0c31ddb2elf  
2024-04-27 07:48:09751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:08751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:08751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:08751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:08157d18c09de0ec3087ece4c9474dd4044a425ae7d88231faa62dad967a463be1unknown  
2024-04-27 07:48:08751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:089d08cfbaa5af7f86bf1b22267362509bad3c9dfe5fdfa6425d9698e61aa93a50unknown  
2024-04-27 07:48:08751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:07751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:07da208b1dd4f8792738e40225b5f71380a743553f76dac52e783660bc2b768d80unknown  
2024-04-27 07:48:07751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:06751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:06751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:06751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-27 07:48:06751d2d4c589da5d2f67301bb7896e782b642ccd0b67d861a3f6f4b668da55e1funknown  
2024-04-26 23:11:05fb088cec2214538871e219a8f90f737cbdb9b759d2473d92efe9de084fbc9e30elf  
2024-04-26 23:11:05e1dbc46eea55f940b6f63822b88b45e4be4fd122deb867a55e13f7b3820678ecelf  
2024-04-26 23:11:0592baabd1045e6a8ae73952451668ed9c8d4f87dbbaf1bfdb76cf90a9b7a915deelf