URLhaus Database

You are currently viewing the URLhaus database entry for http://23.160.56.192/p.txt which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3772332
URL: http://23.160.56.192/p.txt
URL Status:Offline
Host: 23.160.56.192
Date added:2026-02-05 04:45:09 UTC
Last online:2026-02-20 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: JustaguyAA
Abuse complaint sent (?): Yes (2026-02-05 04:46:12 UTC to noc{at}host4nerd[dot]com)
Takedown time:15 days, 8 hours, 12 minutes Bad (down since 2026-02-20 12:58:39 UTC)
Tags:elf Xorddos

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-19p.txtelf 5b15e7a49f953e28a06ee8aa2d50811edd8566005117af2b0599d07bbd41d8d9n/aXorDDoS
2026-02-16p.txtelf c3714fc0446a1adaedbc86e3dd0b2121e65b34cc3d40494f709c6873fa0d56bcn/aXorDDoS
2026-02-14p.txtelf 10e43894490d98a91f3d409a83d984556d619e91782333033ad3d7fb1b9def8bn/aXorDDoS
2026-02-05p.txtelf 5fefeaf30b8cd96607ee013a771c619d2bcba75e294f57e98ba86e8b40e51090n/aXorDDoS