URLhaus Database

You are currently viewing the URLhaus database entry for http://91.199.133.133:8080/bot.arm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3892833
URL: http://91.199.133.133:8080/bot.arm
URL Status:Offline
Host: 91.199.133.133
Date added:2026-07-28 03:55:19 UTC
Last online:2026-07-31 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-07-28 03:56:21 UTC to abuse{at}alexhost[dot]com)
Takedown time:3 days, 6 hours, 25 minutes Bad (down since 2026-07-31 10:22:07 UTC)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-31bot.armelf 4c0414ec230c1faf47fa57516879b4f1fecd3f5e6e370faef71b7c3de67634fdn/aMirai
2026-07-30bot.armelf afae69b53881fed76460f309197b222e6766562c01089e5007b5aece9dc8a4ean/aMirai
2026-07-29bot.armelf 8f51da6e72b00cb4c261c86ed00fd384c59cb6bce92f3f2ab9afa8a6902f9c78n/aMirai
2026-07-29bot.armelf 663606a57b1f38da90136e9a8c2808c860e12a86d06e65231c104d7d44727a46n/aMirai
2026-07-28bot.armelf fc19c4f3bb420fbc3d14f64e45648bf0515ac81cc1b780fca424a1c835cba069n/aMirai