URLhaus Database

You are currently viewing the URLhaus database entry for http://151.242.30.16:6677/bot which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:3677493
URL: http://151.242.30.16:6677/bot
URL Status:Offline
Host: 151.242.30.16
Date added:2025-10-14 06:15:36 UTC
Last online:2025-10-14 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-10-14 10:47:16 UTC to report{at}abuseradar[dot]com)
Takedown time:11 hours, 35 minutes Good (down since 2025-10-14 22:22:56 UTC)
Tags:elf geofenced ladvix ua-wget USA x86

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-10-14botelf 8e8393afdc833c6d87fae538c9349ba0995f30abecea162811f1494905a7fa3dn/aLadvix
2025-10-14botelf 2f3701c3afd8942e9c43c92a0554ef3bbf5cf4e97ea5e8524687ae13a0fbb028Virustotal results 3.33%