🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.134.121:8080/bot.mpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3920627
URL: http://176.65.134.121:8080/bot.mpsl
URL Status:flame Online (spreading malware for 4 days, 5 hours, 51 minutes)
Host: 176.65.134.121
Date added:2026-09-22 05:16:34 UTC
Threat:Malware download Malware download
Reporter: von
Abuse complaint sent (?): Yes (2026-09-22 05:17:28 UTC to abuse{at}pfcloud[dot]io)
Tags:mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-09-26bot.mpslelf c8376c31869870e87c50f4f970838daedfe70677c48c1eb67f29064b31a36307n/aMirai
2026-09-25bot.mpslelf 1d4f0c9c2932477d1c7a9a2abfaa55fd2d5aa54f83a2526e851c0ebc85f16c8an/aMirai
2026-09-25bot.mpslelf d2121554d347381d975dd18af6acaa10fc2cff35f04c48ef31c311ea600cb335n/aMirai
2026-09-25bot.mpslelf 3a093048798c3ceb7f168ce101c03a6e92fdffe46a6007e4645d751d91808a6dn/aMirai
2026-09-25bot.mpslelf 3a7bf6f11d972b034f44222b21fad10de8ac30d197ee406f027e4fe38951f245n/aMirai
2026-09-24bot.mpslelf 49a47cfbff14a5c09035f2cd51c873b9559df3c914b61c3bc222abbbc5694b4bn/aMirai
2026-09-24bot.mpslelf d4914642e0f4bce640fbd5b0d218f4fb460da165e3c80f0a44736d5788499796n/aMirai
2026-09-24bot.mpslelf 61fd766473077ed6b6e62b171342ca5581cf3e930c67d0cb94c6e7491d5cacc1n/aMirai
2026-09-24bot.mpslelf 7f3a609f23996c9bd29bbb69a19904200f7c5179ae48f852705997e698c5f674n/a
2026-09-24bot.mpslelf 082a586bef1c6398c797f61e716ce5e6c5a1e4d3b80bd0e1b5d16d73cc7da3c4n/a
2026-09-24bot.mpslelf 073f557c471315d9828ec048ac35b09281dcce2f14bae60ffe130d1cbd83dc2fn/a
2026-09-24bot.mpslelf 215d4190b32b707e737abd732120eb1bb6c51ee7af5ee21cb9fb970fb86b239an/aMirai
2026-09-23bot.mpslelf e99061f44c6df6990e3720cb2c3ab1b645b6634327408b2a189a0310221e1d6dn/aMirai
2026-09-23bot.mpslelf 8b44ab7f9d40139682081a6d231ace528b21fdc89844aac2e9a2dd3f6cc5c556n/aMirai
2026-09-23bot.mpslelf 9036633cb3ef727aeb4c41bb8c96b2a7e1f79dbc04797be16480590faed8dc79n/aMirai
2026-09-23bot.mpslelf 932918ca4a481fffad2c2d4d84a9efa587c6f7bf15e2db5d06cccb8b91952c24n/aMirai
2026-09-22bot.mpslelf fc8df8c98a634f43f45235526532939a7f99d72ca8abce61afac1718a4026d34n/aMirai
2026-09-22bot.mpslelf eb21e3bc8b67a94c43548776767d6ec03e27463b431eda424ee10b14d667909en/aMirai