[ { "id": 153466, "urlhaus_id": "3944447", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/A001envio.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:15 UTC", "discovered_at": "2026-10-07T18:44:15.000Z" }, { "id": 153465, "urlhaus_id": "3944448", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/SavedStart.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:15 UTC", "discovered_at": "2026-10-07T18:44:15.000Z" }, { "id": 153473, "urlhaus_id": "3944440", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/envio32b.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:14 UTC", "discovered_at": "2026-10-07T18:44:14.000Z" }, { "id": 153472, "urlhaus_id": "3944441", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/rain.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:14 UTC", "discovered_at": "2026-10-07T18:44:14.000Z" }, { "id": 153471, "urlhaus_id": "3944442", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/PURE.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:14 UTC", "discovered_at": "2026-10-07T18:44:14.000Z" }, { "id": 153470, "urlhaus_id": "3944443", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/salvado26.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:14 UTC", "discovered_at": "2026-10-07T18:44:14.000Z" }, { "id": 153469, "urlhaus_id": "3944444", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/Q.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:14 UTC", "discovered_at": "2026-10-07T18:44:14.000Z" }, { "id": 153468, "urlhaus_id": "3944445", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/v6envio.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:14 UTC", "discovered_at": "2026-10-07T18:44:14.000Z" }, { "id": 153467, "urlhaus_id": "3944446", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/A1EnvioGh.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:14 UTC", "discovered_at": "2026-10-07T18:44:14.000Z" }, { "id": 153485, "urlhaus_id": "3944428", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/Saved%20Test.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153484, "urlhaus_id": "3944429", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/A1Envionew.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153483, "urlhaus_id": "3944430", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/queso.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153482, "urlhaus_id": "3944431", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/rAmgipk.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153481, "urlhaus_id": "3944432", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/wd.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153480, "urlhaus_id": "3944433", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/envio1gh.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153479, "urlhaus_id": "3944434", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/envio1uac.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153478, "urlhaus_id": "3944435", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/bro.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153477, "urlhaus_id": "3944436", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/paste.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153476, "urlhaus_id": "3944437", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/1UAC.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153475, "urlhaus_id": "3944438", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/pureza.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153474, "urlhaus_id": "3944439", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/broxw.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:13 UTC", "discovered_at": "2026-10-07T18:44:13.000Z" }, { "id": 153487, "urlhaus_id": "3944426", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/anew.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:12 UTC", "discovered_at": "2026-10-07T18:44:12.000Z" }, { "id": 153486, "urlhaus_id": "3944427", "url": "https://raw.githubusercontent.com/abeasinf/ARCHIVOS/refs/heads/main/a1envio.txt", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:44:12 UTC", "discovered_at": "2026-10-07T18:44:12.000Z" }, { "id": 153488, "urlhaus_id": "3944425", "url": "https://plf7x.valci.store/update.sh", "host": "plf7x.valci.store", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-07 18:42:09 UTC", "discovered_at": "2026-10-07T18:42:09.000Z" }, { "id": 153489, "urlhaus_id": "3944424", "url": "https://github.com/Ridoyp99/xxxxxx/blob/main/lol.jpg", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "RCE, Remote Code Execution, SSRF, xml", "last_online": null, "first_seen": "2026-10-07 18:42:07 UTC", "discovered_at": "2026-10-07T18:42:07.000Z" }, { "id": 153490, "urlhaus_id": "3944423", "url": "https://github.com/Ridoyp99/xxxxxx/blob/main/xxe.xml", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "RCE, Remote Code Execution, SSRF, xml", "last_online": null, "first_seen": "2026-10-07 18:42:06 UTC", "discovered_at": "2026-10-07T18:42:06.000Z" }, { "id": 153491, "urlhaus_id": "3944422", "url": "https://github.com/abeasinf/ARCHIVOS/raw/refs/heads/main/anew.txt", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded", "last_online": null, "first_seen": "2026-10-07 18:38:14 UTC", "discovered_at": "2026-10-07T18:38:14.000Z" }, { "id": 153492, "urlhaus_id": "3944421", "url": "https://athuselevadores.com.br/Bleaty.toc", "host": "athuselevadores.com.br", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader", "last_online": null, "first_seen": "2026-10-07 18:37:13 UTC", "discovered_at": "2026-10-07T18:37:13.000Z" }, { "id": 153494, "urlhaus_id": "3944419", "url": "https://rough-truth-e072.publicftpresend.workers.dev/abjeyp", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii", "last_online": null, "first_seen": "2026-10-07 18:37:11 UTC", "discovered_at": "2026-10-07T18:37:11.000Z" }, { "id": 153493, "urlhaus_id": "3944420", "url": "http://217.60.76.20/anyname/img_140637.png", "host": "217.60.76.20", "host_ip": "217.60.76.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego", "last_online": null, "first_seen": "2026-10-07 18:37:11 UTC", "discovered_at": "2026-10-07T18:37:11.000Z" }, { "id": 153495, "urlhaus_id": "3944418", "url": "http://105.224.5.39:39999/bin.sh", "host": "105.224.5.39", "host_ip": "105.224.5.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 18:33:17 UTC", "discovered_at": "2026-10-07T18:33:17.000Z" }, { "id": 153496, "urlhaus_id": "3944417", "url": "http://115.63.49.201:46360/bin.sh", "host": "115.63.49.201", "host_ip": "115.63.49.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 18:32:12 UTC", "discovered_at": "2026-10-07T18:32:12.000Z" }, { "id": 153497, "urlhaus_id": "3944416", "url": "http://103.238.235.250/armv6l", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:14 UTC", "discovered_at": "2026-10-07T18:30:14.000Z" }, { "id": 153501, "urlhaus_id": "3944412", "url": "http://103.238.235.250/sparc", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:12 UTC", "discovered_at": "2026-10-07T18:30:12.000Z" }, { "id": 153500, "urlhaus_id": "3944413", "url": "http://103.238.235.250/armv5l", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:12 UTC", "discovered_at": "2026-10-07T18:30:12.000Z" }, { "id": 153499, "urlhaus_id": "3944414", "url": "http://103.238.235.250/i586", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:12 UTC", "discovered_at": "2026-10-07T18:30:12.000Z" }, { "id": 153498, "urlhaus_id": "3944415", "url": "http://103.238.235.250/i686", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:12 UTC", "discovered_at": "2026-10-07T18:30:12.000Z" }, { "id": 153504, "urlhaus_id": "3944409", "url": "http://103.238.235.250/armv4l", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:10 UTC", "discovered_at": "2026-10-07T18:30:10.000Z" }, { "id": 153503, "urlhaus_id": "3944410", "url": "http://103.238.235.250/m68k", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:10 UTC", "discovered_at": "2026-10-07T18:30:10.000Z" }, { "id": 153502, "urlhaus_id": "3944411", "url": "http://103.238.235.250/powerpc", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 18:30:10 UTC", "discovered_at": "2026-10-07T18:30:10.000Z" }, { "id": 153505, "urlhaus_id": "3944408", "url": "https://andbake.cam/img_233018.png", "host": "andbake.cam", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-07 18:26:16 UTC", "discovered_at": "2026-10-07T18:26:16.000Z" }, { "id": 153506, "urlhaus_id": "3944407", "url": "http://andbake.cam/OhTmRuW3", "host": "andbake.cam", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "xworm", "last_online": null, "first_seen": "2026-10-07 18:26:15 UTC", "discovered_at": "2026-10-07T18:26:15.000Z" }, { "id": 153508, "urlhaus_id": "3944405", "url": "https://rough-truth-e072.publicftpresend.workers.dev/smpuvcjzd", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "xworm", "last_online": null, "first_seen": "2026-10-07 18:25:18 UTC", "discovered_at": "2026-10-07T18:25:18.000Z" }, { "id": 153507, "urlhaus_id": "3944406", "url": "https://pub-37f3a615586d47f4996e932bf6df7670.r2.dev/ROYBIN.png", "host": "pub-37f3a615586d47f4996e932bf6df7670.r2.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-07 18:25:18 UTC", "discovered_at": "2026-10-07T18:25:18.000Z" }, { "id": 153510, "urlhaus_id": "3944403", "url": "http://andbake.cam/HzZgPVc7", "host": "andbake.cam", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "xworm", "last_online": null, "first_seen": "2026-10-07 18:24:19 UTC", "discovered_at": "2026-10-07T18:24:19.000Z" }, { "id": 153509, "urlhaus_id": "3944404", "url": "https://andbake.cam/img_233158.png", "host": "andbake.cam", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-07 18:24:19 UTC", "discovered_at": "2026-10-07T18:24:19.000Z" }, { "id": 153511, "urlhaus_id": "3944402", "url": "https://sandybeachesandsunsets.com/img_060214.png", "host": "sandybeachesandsunsets.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "DarkCloud, stego", "last_online": null, "first_seen": "2026-10-07 18:23:14 UTC", "discovered_at": "2026-10-07T18:23:14.000Z" }, { "id": 153512, "urlhaus_id": "3944401", "url": "https://fibernetperu.pe/img_120922.png", "host": "fibernetperu.pe", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-07 18:22:20 UTC", "discovered_at": "2026-10-07T18:22:20.000Z" }, { "id": 153513, "urlhaus_id": "3944400", "url": "http://fibernetperu.pe/dpRTpu55", "host": "fibernetperu.pe", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, powershell, ps1, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-07 18:21:16 UTC", "discovered_at": "2026-10-07T18:21:16.000Z" }, { "id": 153514, "urlhaus_id": "3944399", "url": "https://sugarfreedcup.co.za/img_033922.png", "host": "sugarfreedcup.co.za", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-07 18:19:15 UTC", "discovered_at": "2026-10-07T18:19:15.000Z" }, { "id": 153515, "urlhaus_id": "3944398", "url": "http://wp.fujeigroup.com:8888/file/img_154255.png", "host": "wp.fujeigroup.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, rat, stego", "last_online": null, "first_seen": "2026-10-07 18:18:15 UTC", "discovered_at": "2026-10-07T18:18:15.000Z" }, { "id": 153516, "urlhaus_id": "3944397", "url": "http://42.54.110.21:37833/bin.sh", "host": "42.54.110.21", "host_ip": "42.54.110.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:16:19 UTC", "discovered_at": "2026-10-07T18:16:19.000Z" }, { "id": 153517, "urlhaus_id": "3944396", "url": "http://59.97.253.220:41327/bin.sh", "host": "59.97.253.220", "host_ip": "59.97.253.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 18:16:18 UTC", "discovered_at": "2026-10-07T18:16:18.000Z" }, { "id": 153519, "urlhaus_id": "3944394", "url": "http://110.138.1.45:52515/bin.sh", "host": "110.138.1.45", "host_ip": "110.138.1.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 18:16:17 UTC", "discovered_at": "2026-10-07T18:16:17.000Z" }, { "id": 153518, "urlhaus_id": "3944395", "url": "http://39.87.126.131:54912/bin.sh", "host": "39.87.126.131", "host_ip": "39.87.126.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 18:16:17 UTC", "discovered_at": "2026-10-07T18:16:17.000Z" }, { "id": 153520, "urlhaus_id": "3944393", "url": "https://flocmaterials.shop/nnnnnnzeeee/secured_stub.ps1", "host": "flocmaterials.shop", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mascii, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-07 18:15:15 UTC", "discovered_at": "2026-10-07T18:15:15.000Z" }, { "id": 153521, "urlhaus_id": "3944392", "url": "https://sugarfreedcup.co.za/img_035907.png", "host": "sugarfreedcup.co.za", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-07 18:14:18 UTC", "discovered_at": "2026-10-07T18:14:18.000Z" }, { "id": 153522, "urlhaus_id": "3944391", "url": "https://aksiyononline.best/masabbikk/secured_stub.ps1", "host": "aksiyononline.best", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-07 18:14:16 UTC", "discovered_at": "2026-10-07T18:14:16.000Z" }, { "id": 153523, "urlhaus_id": "3944390", "url": "http://103.238.235.250/telnetbins.sh", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, gafgyt, honeypot", "last_online": null, "first_seen": "2026-10-07 18:06:31 UTC", "discovered_at": "2026-10-07T18:06:31.000Z" }, { "id": 153527, "urlhaus_id": "3944386", "url": "http://103.238.235.250/x86", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-07 18:06:30 UTC", "discovered_at": "2026-10-07T18:06:30.000Z" }, { "id": 153526, "urlhaus_id": "3944387", "url": "http://103.238.235.250/mips", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-07 18:06:30 UTC", "discovered_at": "2026-10-07T18:06:30.000Z" }, { "id": 153525, "urlhaus_id": "3944388", "url": "http://103.238.235.250/sh4", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-07 18:06:30 UTC", "discovered_at": "2026-10-07T18:06:30.000Z" }, { "id": 153524, "urlhaus_id": "3944389", "url": "http://103.238.235.250/mipsel", "host": "103.238.235.250", "host_ip": "103.238.235.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-07 18:06:30 UTC", "discovered_at": "2026-10-07T18:06:30.000Z" }, { "id": 153528, "urlhaus_id": "3944385", "url": "http://31.40.204.114/4.jpg", "host": "31.40.204.114", "host_ip": "31.40.204.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:06:16 UTC", "discovered_at": "2026-10-07T18:06:16.000Z" }, { "id": 153530, "urlhaus_id": "3944383", "url": "http://nd.tdpqnf.com/file/mccppcS.txt", "host": "nd.tdpqnf.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:19 UTC", "discovered_at": "2026-10-07T18:04:19.000Z" }, { "id": 153529, "urlhaus_id": "3944384", "url": "http://107.172.206.125/img/1.jpg", "host": "107.172.206.125", "host_ip": "107.172.206.125", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:19 UTC", "discovered_at": "2026-10-07T18:04:19.000Z" }, { "id": 153531, "urlhaus_id": "3944382", "url": "http://nd.tdpqnf.com/file/jpeSoaI.txt", "host": "nd.tdpqnf.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:18 UTC", "discovered_at": "2026-10-07T18:04:18.000Z" }, { "id": 153533, "urlhaus_id": "3944380", "url": "http://nd.tdpqnf.com/sma/mnpckbo.txt", "host": "nd.tdpqnf.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:17 UTC", "discovered_at": "2026-10-07T18:04:17.000Z" }, { "id": 153532, "urlhaus_id": "3944381", "url": "http://31.40.204.114/FiIpiSf.txt", "host": "31.40.204.114", "host_ip": "31.40.204.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:17 UTC", "discovered_at": "2026-10-07T18:04:17.000Z" }, { "id": 153534, "urlhaus_id": "3944379", "url": "http://31.40.204.114/1.jpg", "host": "31.40.204.114", "host_ip": "31.40.204.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:16 UTC", "discovered_at": "2026-10-07T18:04:16.000Z" }, { "id": 153536, "urlhaus_id": "3944377", "url": "http://107.172.206.125/55/wegoodforme.htA", "host": "107.172.206.125", "host_ip": "107.172.206.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:15 UTC", "discovered_at": "2026-10-07T18:04:15.000Z" }, { "id": 153535, "urlhaus_id": "3944378", "url": "http://107.172.206.125/60/wegivenbestthignswithme.htA", "host": "107.172.206.125", "host_ip": "107.172.206.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:04:15 UTC", "discovered_at": "2026-10-07T18:04:15.000Z" }, { "id": 153537, "urlhaus_id": "3944376", "url": "http://42.57.40.143:38792/bin.sh", "host": "42.57.40.143", "host_ip": "42.57.40.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 18:03:20 UTC", "discovered_at": "2026-10-07T18:03:20.000Z" }, { "id": 153538, "urlhaus_id": "3944375", "url": "https://hardly-signatures-loc-surf.trycloudflare.com/download/WindowsUpdate.ps1", "host": "hardly-signatures-loc-surf.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-07 18:02:11 UTC", "discovered_at": "2026-10-07T18:02:11.000Z" }, { "id": 153539, "urlhaus_id": "3944374", "url": "http://107.173.143.44/60/Aakdhfi.txt", "host": "107.173.143.44", "host_ip": "107.173.143.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:28 UTC", "discovered_at": "2026-10-07T18:01:28.000Z" }, { "id": 153541, "urlhaus_id": "3944372", "url": "http://64.224.17.115/img/1.jpg", "host": "64.224.17.115", "host_ip": "64.224.17.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:17 UTC", "discovered_at": "2026-10-07T18:01:17.000Z" }, { "id": 153540, "urlhaus_id": "3944373", "url": "http://180.243.51.69:36057/i", "host": "180.243.51.69", "host_ip": "180.243.51.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 18:01:17 UTC", "discovered_at": "2026-10-07T18:01:17.000Z" }, { "id": 153551, "urlhaus_id": "3944362", "url": "http://194.116.236.88/FjVDAEFaNrcPqhxrQGrdI146.bin", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153550, "urlhaus_id": "3944363", "url": "http://194.116.236.88/YUvLiZwYOl185.bin", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153549, "urlhaus_id": "3944364", "url": "http://194.116.236.88/VlgpRXHPuqEgj205.bin", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153548, "urlhaus_id": "3944365", "url": "http://194.116.236.88/Snderjyskens.hhk", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153547, "urlhaus_id": "3944366", "url": "http://194.116.236.88/Mavede.asd", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153546, "urlhaus_id": "3944367", "url": "http://194.116.236.88/Pereia.dsp", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153545, "urlhaus_id": "3944368", "url": "http://194.116.236.88/Bothilde.mdp", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153544, "urlhaus_id": "3944369", "url": "http://194.116.236.88/wiiMGN142.bin", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153543, "urlhaus_id": "3944370", "url": "http://194.116.236.88/AiTPtsjHQ176.bin", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153542, "urlhaus_id": "3944371", "url": "http://194.116.236.88/Jernholdiges.asi", "host": "194.116.236.88", "host_ip": "194.116.236.88", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 18:01:13 UTC", "discovered_at": "2026-10-07T18:01:13.000Z" }, { "id": 153552, "urlhaus_id": "3944361", "url": "http://112.225.100.68:54279/bin.sh", "host": "112.225.100.68", "host_ip": "112.225.100.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 17:47:32 UTC", "discovered_at": "2026-10-07T17:47:32.000Z" }, { "id": 153554, "urlhaus_id": "3944359", "url": "http://39.46.175.163:60915/i", "host": "39.46.175.163", "host_ip": "39.46.175.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 17:47:14 UTC", "discovered_at": "2026-10-07T17:47:14.000Z" }, { "id": 153553, "urlhaus_id": "3944360", "url": "http://115.57.87.38:35763/i", "host": "115.57.87.38", "host_ip": "115.57.87.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 17:47:14 UTC", "discovered_at": "2026-10-07T17:47:14.000Z" }, { "id": 153555, "urlhaus_id": "3944358", "url": "https://192.162.199.159:5175/d.exe", "host": "192.162.199.159", "host_ip": "192.162.199.159", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-07 17:44:13 UTC", "discovered_at": "2026-10-07T17:44:13.000Z" }, { "id": 153556, "urlhaus_id": "3944357", "url": "http://220.198.113.61:56922/i", "host": "220.198.113.61", "host_ip": "220.198.113.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 17:32:12 UTC", "discovered_at": "2026-10-07T17:32:12.000Z" }, { "id": 153557, "urlhaus_id": "3944356", "url": "http://45.137.201.81/update.ps1", "host": "45.137.201.81", "host_ip": "45.137.201.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-137-201-81, powershell, ua-wget", "last_online": null, "first_seen": "2026-10-07 17:07:16 UTC", "discovered_at": "2026-10-07T17:07:16.000Z" }, { "id": 153558, "urlhaus_id": "3944355", "url": "http://123.14.152.208:44040/i", "host": "123.14.152.208", "host_ip": "123.14.152.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-07 17:03:24 UTC", "discovered_at": "2026-10-07T17:03:24.000Z" }, { "id": 153559, "urlhaus_id": "3944354", "url": "http://61.136.85.234:34744/i", "host": "61.136.85.234", "host_ip": "61.136.85.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 17:02:16 UTC", "discovered_at": "2026-10-07T17:02:16.000Z" }, { "id": 153560, "urlhaus_id": "3944353", "url": "http://115.59.88.197:58691/bin.sh", "host": "115.59.88.197", "host_ip": "115.59.88.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 17:02:11 UTC", "discovered_at": "2026-10-07T17:02:11.000Z" }, { "id": 153564, "urlhaus_id": "3944349", "url": "http://101.99.95.124/yarn", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "101-99-95-124, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-07 17:01:27 UTC", "discovered_at": "2026-10-07T17:01:27.000Z" }, { "id": 153563, "urlhaus_id": "3944350", "url": "http://101.99.95.124/pay", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "101-99-95-124, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-07 17:01:27 UTC", "discovered_at": "2026-10-07T17:01:27.000Z" }, { "id": 153562, "urlhaus_id": "3944351", "url": "http://101.99.95.124/sora.sh", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "101-99-95-124, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-07 17:01:27 UTC", "discovered_at": "2026-10-07T17:01:27.000Z" }, { "id": 153561, "urlhaus_id": "3944352", "url": "http://101.99.95.124/bin", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "101-99-95-124, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-07 17:01:27 UTC", "discovered_at": "2026-10-07T17:01:27.000Z" }, { "id": 153565, "urlhaus_id": "3944348", "url": "http://144.31.150.183/5r3fqt67ew531has4231.x86", "host": "144.31.150.183", "host_ip": "144.31.150.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "144-31-150-183, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:55:25 UTC", "discovered_at": "2026-10-07T16:55:25.000Z" }, { "id": 153566, "urlhaus_id": "3944347", "url": "http://144.31.150.183/5r3fqt67ew531has4231.arm6", "host": "144.31.150.183", "host_ip": "144.31.150.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "144-31-150-183, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:54:22 UTC", "discovered_at": "2026-10-07T16:54:22.000Z" }, { "id": 153569, "urlhaus_id": "3944344", "url": "http://144.31.150.183/5r3fqt67ew531has4231.arm7", "host": "144.31.150.183", "host_ip": "144.31.150.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "144-31-150-183, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:53:19 UTC", "discovered_at": "2026-10-07T16:53:19.000Z" }, { "id": 153568, "urlhaus_id": "3944345", "url": "http://144.31.150.183/5r3fqt67ew531has4231.mpsl", "host": "144.31.150.183", "host_ip": "144.31.150.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "144-31-150-183, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:53:19 UTC", "discovered_at": "2026-10-07T16:53:19.000Z" }, { "id": 153567, "urlhaus_id": "3944346", "url": "http://144.31.150.183/5r3fqt67ew531has4231.arm5", "host": "144.31.150.183", "host_ip": "144.31.150.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "144-31-150-183, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:53:19 UTC", "discovered_at": "2026-10-07T16:53:19.000Z" }, { "id": 153570, "urlhaus_id": "3944343", "url": "http://23.254.195.48:8099/exp.so", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "23-254-195-48-8099, elf, kinsing, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:49:15 UTC", "discovered_at": "2026-10-07T16:49:15.000Z" }, { "id": 153574, "urlhaus_id": "3944339", "url": "http://104.168.4.206/dlr.ppc", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:24 UTC", "discovered_at": "2026-10-07T16:47:24.000Z" }, { "id": 153573, "urlhaus_id": "3944340", "url": "http://104.168.4.206/dlr.arm7", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:24 UTC", "discovered_at": "2026-10-07T16:47:24.000Z" }, { "id": 153572, "urlhaus_id": "3944341", "url": "http://104.168.4.206/dlr.mips", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:24 UTC", "discovered_at": "2026-10-07T16:47:24.000Z" }, { "id": 153571, "urlhaus_id": "3944342", "url": "http://104.168.4.206/disspoor", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:24 UTC", "discovered_at": "2026-10-07T16:47:24.000Z" }, { "id": 153580, "urlhaus_id": "3944333", "url": "http://104.168.4.206/dlr.arm", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:23 UTC", "discovered_at": "2026-10-07T16:47:23.000Z" }, { "id": 153579, "urlhaus_id": "3944334", "url": "http://104.168.4.206/dlr.mpsl", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:23 UTC", "discovered_at": "2026-10-07T16:47:23.000Z" }, { "id": 153578, "urlhaus_id": "3944335", "url": "http://104.168.4.206/dlr.x86", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:23 UTC", "discovered_at": "2026-10-07T16:47:23.000Z" }, { "id": 153577, "urlhaus_id": "3944336", "url": "http://104.168.4.206/dlr.arm6", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:23 UTC", "discovered_at": "2026-10-07T16:47:23.000Z" }, { "id": 153576, "urlhaus_id": "3944337", "url": "http://104.168.4.206/dlr.arm5", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:23 UTC", "discovered_at": "2026-10-07T16:47:23.000Z" }, { "id": 153575, "urlhaus_id": "3944338", "url": "http://104.168.4.206/dlr.sh4", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:47:23 UTC", "discovered_at": "2026-10-07T16:47:23.000Z" }, { "id": 153582, "urlhaus_id": "3944331", "url": "http://103.111.23.13:59651/bin.sh", "host": "103.111.23.13", "host_ip": "103.111.23.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 16:47:11 UTC", "discovered_at": "2026-10-07T16:47:11.000Z" }, { "id": 153581, "urlhaus_id": "3944332", "url": "http://42.52.20.56:49690/bin.sh", "host": "42.52.20.56", "host_ip": "42.52.20.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 16:47:11 UTC", "discovered_at": "2026-10-07T16:47:11.000Z" }, { "id": 153583, "urlhaus_id": "3944330", "url": "http://115.55.192.235:53874/bin.sh", "host": "115.55.192.235", "host_ip": "115.55.192.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 16:47:10 UTC", "discovered_at": "2026-10-07T16:47:10.000Z" }, { "id": 153584, "urlhaus_id": "3944329", "url": "http://176.65.139.36/e", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:45:20 UTC", "discovered_at": "2026-10-07T16:45:20.000Z" }, { "id": 153585, "urlhaus_id": "3944328", "url": "https://severidades.cfd/wp-content/themes/classic/sevv.ps1", "host": "severidades.cfd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-07 16:45:19 UTC", "discovered_at": "2026-10-07T16:45:19.000Z" }, { "id": 153587, "urlhaus_id": "3944326", "url": "https://124.198.131.75/bin/support.client.exe", "host": "124.198.131.75", "host_ip": "124.198.131.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "124-198-131-75, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:39:15 UTC", "discovered_at": "2026-10-07T16:39:15.000Z" }, { "id": 153586, "urlhaus_id": "3944327", "url": "https://124.198.131.75/Bin/ScreenConnect.ClientSetup.exe", "host": "124.198.131.75", "host_ip": "124.198.131.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "124-198-131-75, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:39:15 UTC", "discovered_at": "2026-10-07T16:39:15.000Z" }, { "id": 153588, "urlhaus_id": "3944325", "url": "http://171.81.95.244:56237/bin.sh", "host": "171.81.95.244", "host_ip": "171.81.95.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 16:32:20 UTC", "discovered_at": "2026-10-07T16:32:20.000Z" }, { "id": 153589, "urlhaus_id": "3944324", "url": "http://42.59.112.10:49116/i", "host": "42.59.112.10", "host_ip": "42.59.112.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 16:32:13 UTC", "discovered_at": "2026-10-07T16:32:13.000Z" }, { "id": 153595, "urlhaus_id": "3944318", "url": "https://unrealclient.pages.dev/unrealclient-3.0.2-obf.jar", "host": "unrealclient.pages.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "jar, java, stealer", "last_online": null, "first_seen": "2026-10-07 16:28:14 UTC", "discovered_at": "2026-10-07T16:28:14.000Z" }, { "id": 153594, "urlhaus_id": "3944319", "url": "https://loader2-4.github.io/Loader2-4.zip", "host": "loader2-4.github.io", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "bridgeagent", "last_online": null, "first_seen": "2026-10-07 16:28:14 UTC", "discovered_at": "2026-10-07T16:28:14.000Z" }, { "id": 153593, "urlhaus_id": "3944320", "url": "http://124.198.132.250:8000/stub.ps1", "host": "124.198.132.250", "host_ip": "124.198.132.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "124-198-132-250-8000, powershell, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:28:14 UTC", "discovered_at": "2026-10-07T16:28:14.000Z" }, { "id": 153592, "urlhaus_id": "3944321", "url": "http://124.198.132.250:8000/wrB.ps1", "host": "124.198.132.250", "host_ip": "124.198.132.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "124-198-132-250-8000, powershell, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:28:14 UTC", "discovered_at": "2026-10-07T16:28:14.000Z" }, { "id": 153591, "urlhaus_id": "3944322", "url": "http://124.198.132.250:8000/raw1.ps1", "host": "124.198.132.250", "host_ip": "124.198.132.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "124-198-132-250-8000, powershell, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:28:14 UTC", "discovered_at": "2026-10-07T16:28:14.000Z" }, { "id": 153590, "urlhaus_id": "3944323", "url": "http://124.198.132.250:8000/PrintSpoofer64.exe", "host": "124.198.132.250", "host_ip": "124.198.132.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "124-198-132-250-8000, exe, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:28:14 UTC", "discovered_at": "2026-10-07T16:28:14.000Z" }, { "id": 153596, "urlhaus_id": "3944317", "url": "http://176.65.139.229/bin/manta.arc", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:24:23 UTC", "discovered_at": "2026-10-07T16:24:23.000Z" }, { "id": 153598, "urlhaus_id": "3944315", "url": "http://176.65.139.229/bin/manta.mipsel", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:23:23 UTC", "discovered_at": "2026-10-07T16:23:23.000Z" }, { "id": 153597, "urlhaus_id": "3944316", "url": "http://176.65.139.229/bin/manta.sh4", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:23:23 UTC", "discovered_at": "2026-10-07T16:23:23.000Z" }, { "id": 153606, "urlhaus_id": "3944307", "url": "http://176.65.139.229/bin/manta.m68k", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153605, "urlhaus_id": "3944308", "url": "http://176.65.139.229/bin/manta.ppc", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153604, "urlhaus_id": "3944309", "url": "http://176.65.139.229/bin/manta.i686", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153603, "urlhaus_id": "3944310", "url": "http://176.65.139.229/bin/manta.mips", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153602, "urlhaus_id": "3944311", "url": "http://176.65.139.229/bin/manta.armv7l", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153601, "urlhaus_id": "3944312", "url": "http://176.65.139.229/bin/manta.armv6l", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153600, "urlhaus_id": "3944313", "url": "http://176.65.139.229/bin/manta.aarch64", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153599, "urlhaus_id": "3944314", "url": "http://176.65.139.229/bin/manta.x86_64", "host": "176.65.139.229", "host_ip": "176.65.139.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-229, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:22:26 UTC", "discovered_at": "2026-10-07T16:22:26.000Z" }, { "id": 153607, "urlhaus_id": "3944306", "url": "http://101.99.95.124/bins/sora.mips", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:20:23 UTC", "discovered_at": "2026-10-07T16:20:23.000Z" }, { "id": 153609, "urlhaus_id": "3944304", "url": "http://101.99.95.124/bins/sora.x86", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:27 UTC", "discovered_at": "2026-10-07T16:19:27.000Z" }, { "id": 153608, "urlhaus_id": "3944305", "url": "http://101.99.95.124/bins/sora.arm6", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:27 UTC", "discovered_at": "2026-10-07T16:19:27.000Z" }, { "id": 153617, "urlhaus_id": "3944296", "url": "http://101.99.95.124/bins/sora.mpsl", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153616, "urlhaus_id": "3944297", "url": "http://13.140.176.180:24331/tadashi.arm7", "host": "13.140.176.180", "host_ip": "13.140.176.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153615, "urlhaus_id": "3944298", "url": "http://101.99.95.124/bins/sora.m68k", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153614, "urlhaus_id": "3944299", "url": "http://101.99.95.124/bins/sora.sh4", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153613, "urlhaus_id": "3944300", "url": "http://101.99.95.124/bins/sora.ppc", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153612, "urlhaus_id": "3944301", "url": "http://101.99.95.124/bins/sora.arm7", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153611, "urlhaus_id": "3944302", "url": "http://101.99.95.124/bins/sora.arm4", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153610, "urlhaus_id": "3944303", "url": "http://101.99.95.124/bins/sora.arm5", "host": "101.99.95.124", "host_ip": "101.99.95.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-07 16:19:25 UTC", "discovered_at": "2026-10-07T16:19:25.000Z" }, { "id": 153618, "urlhaus_id": "3944295", "url": "http://182.118.189.126:40792/bin.sh", "host": "182.118.189.126", "host_ip": "182.118.189.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 16:17:13 UTC", "discovered_at": "2026-10-07T16:17:13.000Z" }, { "id": 153619, "urlhaus_id": "3944294", "url": "http://115.57.65.207:58720/i", "host": "115.57.65.207", "host_ip": "115.57.65.207", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 16:16:17 UTC", "discovered_at": "2026-10-07T16:16:17.000Z" }, { "id": 153620, "urlhaus_id": "3944293", "url": "http://120.28.189.218:37089/i", "host": "120.28.189.218", "host_ip": "120.28.189.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 16:16:16 UTC", "discovered_at": "2026-10-07T16:16:16.000Z" }, { "id": 153621, "urlhaus_id": "3944292", "url": "http://45.172.218.181:45893/i", "host": "45.172.218.181", "host_ip": "45.172.218.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 16:16:15 UTC", "discovered_at": "2026-10-07T16:16:15.000Z" }, { "id": 153622, "urlhaus_id": "3944291", "url": "http://60.177.199.73:38529/i", "host": "60.177.199.73", "host_ip": "60.177.199.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 16:02:15 UTC", "discovered_at": "2026-10-07T16:02:15.000Z" }, { "id": 153623, "urlhaus_id": "3944290", "url": "http://130.0.33.104:39339/i", "host": "130.0.33.104", "host_ip": "130.0.33.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 16:02:12 UTC", "discovered_at": "2026-10-07T16:02:12.000Z" }, { "id": 153624, "urlhaus_id": "3944289", "url": "http://114.227.84.84:59706/bin.sh", "host": "114.227.84.84", "host_ip": "114.227.84.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 15:50:21 UTC", "discovered_at": "2026-10-07T15:50:21.000Z" }, { "id": 153626, "urlhaus_id": "3944287", "url": "http://107.175.88.71/33/wetrongiven.js", "host": "107.175.88.71", "host_ip": "107.175.88.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": "js, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-07 15:49:14 UTC", "discovered_at": "2026-10-07T15:49:14.000Z" }, { "id": 153625, "urlhaus_id": "3944288", "url": "http://107.175.88.71/33/img_182647.png", "host": "107.175.88.71", "host_ip": "107.175.88.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-07 15:49:14 UTC", "discovered_at": "2026-10-07T15:49:14.000Z" }, { "id": 153627, "urlhaus_id": "3944286", "url": "http://107.175.88.71/33/brodaron.htA", "host": "107.175.88.71", "host_ip": "107.175.88.71", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "hta, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-07 15:49:13 UTC", "discovered_at": "2026-10-07T15:49:13.000Z" }, { "id": 153628, "urlhaus_id": "3944285", "url": "http://221.203.183.158:56120/i", "host": "221.203.183.158", "host_ip": "221.203.183.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:19 UTC", "discovered_at": "2026-10-07T15:47:19.000Z" }, { "id": 153639, "urlhaus_id": "3944274", "url": "http://123.172.78.134:34453/i", "host": "123.172.78.134", "host_ip": "123.172.78.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153638, "urlhaus_id": "3944275", "url": "http://125.45.17.175:33893/bin.sh", "host": "125.45.17.175", "host_ip": "125.45.17.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153637, "urlhaus_id": "3944276", "url": "http://78.25.126.68:37205/i", "host": "78.25.126.68", "host_ip": "78.25.126.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153636, "urlhaus_id": "3944277", "url": "http://115.57.15.111:48432/i", "host": "115.57.15.111", "host_ip": "115.57.15.111", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153635, "urlhaus_id": "3944278", "url": "http://130.0.33.104:39339/bin.sh", "host": "130.0.33.104", "host_ip": "130.0.33.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153634, "urlhaus_id": "3944279", "url": "http://42.224.83.188:35709/i", "host": "42.224.83.188", "host_ip": "42.224.83.188", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153633, "urlhaus_id": "3944280", "url": "http://105.224.60.120:53311/i", "host": "105.224.60.120", "host_ip": "105.224.60.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153632, "urlhaus_id": "3944281", "url": "http://182.112.1.67:42073/i", "host": "182.112.1.67", "host_ip": "182.112.1.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153631, "urlhaus_id": "3944282", "url": "http://115.55.192.235:53874/i", "host": "115.55.192.235", "host_ip": "115.55.192.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153630, "urlhaus_id": "3944283", "url": "http://110.138.1.45:52515/i", "host": "110.138.1.45", "host_ip": "110.138.1.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153629, "urlhaus_id": "3944284", "url": "http://27.44.147.214:51674/i", "host": "27.44.147.214", "host_ip": "27.44.147.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:17 UTC", "discovered_at": "2026-10-07T15:47:17.000Z" }, { "id": 153647, "urlhaus_id": "3944266", "url": "http://60.23.232.109:45725/i", "host": "60.23.232.109", "host_ip": "60.23.232.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153646, "urlhaus_id": "3944267", "url": "http://185.147.40.109:56788/i", "host": "185.147.40.109", "host_ip": "185.147.40.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153645, "urlhaus_id": "3944268", "url": "http://42.235.48.74:43871/i", "host": "42.235.48.74", "host_ip": "42.235.48.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153644, "urlhaus_id": "3944269", "url": "http://182.118.245.201:52719/bin.sh", "host": "182.118.245.201", "host_ip": "182.118.245.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153643, "urlhaus_id": "3944270", "url": "http://121.202.142.137:23188/i", "host": "121.202.142.137", "host_ip": "121.202.142.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153642, "urlhaus_id": "3944271", "url": "http://188.38.158.163:35918/i", "host": "188.38.158.163", "host_ip": "188.38.158.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153641, "urlhaus_id": "3944272", "url": "http://42.234.233.75:40282/i", "host": "42.234.233.75", "host_ip": "42.234.233.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153640, "urlhaus_id": "3944273", "url": "http://61.53.83.129:58022/bin.sh", "host": "61.53.83.129", "host_ip": "61.53.83.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:47:16 UTC", "discovered_at": "2026-10-07T15:47:16.000Z" }, { "id": 153648, "urlhaus_id": "3944265", "url": "http://120.28.189.218:37089/bin.sh", "host": "120.28.189.218", "host_ip": "120.28.189.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 15:46:30 UTC", "discovered_at": "2026-10-07T15:46:30.000Z" }, { "id": 153649, "urlhaus_id": "3944264", "url": "http://115.57.255.84:48268/i", "host": "115.57.255.84", "host_ip": "115.57.255.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:46:27 UTC", "discovered_at": "2026-10-07T15:46:27.000Z" }, { "id": 153650, "urlhaus_id": "3944263", "url": "http://119.99.255.81:50970/i", "host": "119.99.255.81", "host_ip": "119.99.255.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 15:46:24 UTC", "discovered_at": "2026-10-07T15:46:24.000Z" }, { "id": 153651, "urlhaus_id": "3944262", "url": "http://42.237.34.84:60213/i", "host": "42.237.34.84", "host_ip": "42.237.34.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:46:22 UTC", "discovered_at": "2026-10-07T15:46:22.000Z" }, { "id": 153657, "urlhaus_id": "3944256", "url": "http://125.43.32.223:55883/i", "host": "125.43.32.223", "host_ip": "125.43.32.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 15:46:21 UTC", "discovered_at": "2026-10-07T15:46:21.000Z" }, { "id": 153656, "urlhaus_id": "3944257", "url": "http://170.84.133.235:33315/i", "host": "170.84.133.235", "host_ip": "170.84.133.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 15:46:21 UTC", "discovered_at": "2026-10-07T15:46:21.000Z" }, { "id": 153655, "urlhaus_id": "3944258", "url": "http://222.127.53.189:54813/i", "host": "222.127.53.189", "host_ip": "222.127.53.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 15:46:21 UTC", "discovered_at": "2026-10-07T15:46:21.000Z" }, { "id": 153654, "urlhaus_id": "3944259", "url": "http://109.194.28.77:29192/i", "host": "109.194.28.77", "host_ip": "109.194.28.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:46:21 UTC", "discovered_at": "2026-10-07T15:46:21.000Z" }, { "id": 153653, "urlhaus_id": "3944260", "url": "http://85.140.44.96:51539/bin.sh", "host": "85.140.44.96", "host_ip": "85.140.44.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:46:21 UTC", "discovered_at": "2026-10-07T15:46:21.000Z" }, { "id": 153652, "urlhaus_id": "3944261", "url": "http://115.58.177.21:40854/i", "host": "115.58.177.21", "host_ip": "115.58.177.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 15:46:21 UTC", "discovered_at": "2026-10-07T15:46:21.000Z" }, { "id": 153658, "urlhaus_id": "3944255", "url": "http://108.168.10.70:34381/bin.sh", "host": "108.168.10.70", "host_ip": "108.168.10.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:46:20 UTC", "discovered_at": "2026-10-07T15:46:20.000Z" }, { "id": 153660, "urlhaus_id": "3944253", "url": "http://144.31.150.183/5r3fqt67ew531has4231.mips", "host": "144.31.150.183", "host_ip": "144.31.150.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, mirai", "last_online": null, "first_seen": "2026-10-07 15:38:27 UTC", "discovered_at": "2026-10-07T15:38:27.000Z" }, { "id": 153659, "urlhaus_id": "3944254", "url": "http://185.82.64.55:36105/Mozi.m", "host": "185.82.64.55", "host_ip": "185.82.64.55", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot, Mozi", "last_online": null, "first_seen": "2026-10-07 15:38:27 UTC", "discovered_at": "2026-10-07T15:38:27.000Z" }, { "id": 153661, "urlhaus_id": "3944252", "url": "https://aetherius.live/downloads/aetherius-1.8.2.jar", "host": "aetherius.live", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-07 15:38:21 UTC", "discovered_at": "2026-10-07T15:38:21.000Z" }, { "id": 153662, "urlhaus_id": "3944251", "url": "https://growgreenhorizons.com/hashmanager.zip", "host": "growgreenhorizons.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:38:20 UTC", "discovered_at": "2026-10-07T15:38:20.000Z" }, { "id": 153663, "urlhaus_id": "3944250", "url": "https://f74.workupload.com/download/vLpjvPm4cqk", "host": "f74.workupload.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-07 15:38:18 UTC", "discovered_at": "2026-10-07T15:38:18.000Z" }, { "id": 153664, "urlhaus_id": "3944249", "url": "http://91.92.242.236/files-129312398/files/file_6090c1ecb2a975aa.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-07 15:38:16 UTC", "discovered_at": "2026-10-07T15:38:16.000Z" }, { "id": 153666, "urlhaus_id": "3944247", "url": "http://23.254.195.48:8099/bx_arm64.p", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-07 15:37:22 UTC", "discovered_at": "2026-10-07T15:37:22.000Z" }, { "id": 153665, "urlhaus_id": "3944248", "url": "http://23.254.195.48:8099/bx_mips.p", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-07 15:37:22 UTC", "discovered_at": "2026-10-07T15:37:22.000Z" }, { "id": 153667, "urlhaus_id": "3944246", "url": "http://130.12.182.19/f/m/.b0s_x86_64", "host": "130.12.182.19", "host_ip": "130.12.182.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner, elf, ssh", "last_online": null, "first_seen": "2026-10-07 15:37:15 UTC", "discovered_at": "2026-10-07T15:37:15.000Z" }, { "id": 153669, "urlhaus_id": "3944244", "url": "https://github.com/Kabot/mig-logcleaner-resurrected.git", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ssh", "last_online": null, "first_seen": "2026-10-07 15:37:13 UTC", "discovered_at": "2026-10-07T15:37:13.000Z" }, { "id": 153668, "urlhaus_id": "3944245", "url": "http://175.173.123.251:46446/Mozi.m", "host": "175.173.123.251", "host_ip": "175.173.123.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:37:13 UTC", "discovered_at": "2026-10-07T15:37:13.000Z" }, { "id": 153670, "urlhaus_id": "3944243", "url": "http://216.9.224.45/30/bestwishesgivenmebesttings.htA?pic_4995459495.JPG", "host": "216.9.224.45", "host_ip": "216.9.224.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 15:37:11 UTC", "discovered_at": "2026-10-07T15:37:11.000Z" }, { "id": 153671, "urlhaus_id": "3944242", "url": "http://175.167.87.144:56600/i", "host": "175.167.87.144", "host_ip": "175.167.87.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 12:32:15 UTC", "discovered_at": "2026-10-07T12:32:15.000Z" }, { "id": 153672, "urlhaus_id": "3944241", "url": "http://218.16.164.137:36531/bin.sh", "host": "218.16.164.137", "host_ip": "218.16.164.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 12:31:16 UTC", "discovered_at": "2026-10-07T12:31:16.000Z" }, { "id": 153673, "urlhaus_id": "3944240", "url": "http://42.230.40.218:51321/i", "host": "42.230.40.218", "host_ip": "42.230.40.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 12:31:14 UTC", "discovered_at": "2026-10-07T12:31:14.000Z" }, { "id": 153674, "urlhaus_id": "3944239", "url": "http://112.238.27.166:50497/i", "host": "112.238.27.166", "host_ip": "112.238.27.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 12:17:29 UTC", "discovered_at": "2026-10-07T12:17:29.000Z" }, { "id": 153675, "urlhaus_id": "3944238", "url": "http://112.228.200.135:55841/bin.sh", "host": "112.228.200.135", "host_ip": "112.228.200.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 12:17:27 UTC", "discovered_at": "2026-10-07T12:17:27.000Z" }, { "id": 153676, "urlhaus_id": "3944237", "url": "http://219.157.176.43:34554/bin.sh", "host": "219.157.176.43", "host_ip": "219.157.176.43", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 12:17:09 UTC", "discovered_at": "2026-10-07T12:17:09.000Z" }, { "id": 153678, "urlhaus_id": "3944235", "url": "http://202.110.9.54:51478/i", "host": "202.110.9.54", "host_ip": "202.110.9.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 12:00:10 UTC", "discovered_at": "2026-10-07T12:00:10.000Z" }, { "id": 153677, "urlhaus_id": "3944236", "url": "http://125.46.198.140:35535/i", "host": "125.46.198.140", "host_ip": "125.46.198.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 12:00:10 UTC", "discovered_at": "2026-10-07T12:00:10.000Z" }, { "id": 153681, "urlhaus_id": "3944232", "url": "http://201.110.189.61:38216/bin.sh", "host": "201.110.189.61", "host_ip": "201.110.189.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 12:00:09 UTC", "discovered_at": "2026-10-07T12:00:09.000Z" }, { "id": 153680, "urlhaus_id": "3944233", "url": "http://14.221.238.62:59076/bin.sh", "host": "14.221.238.62", "host_ip": "14.221.238.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 12:00:09 UTC", "discovered_at": "2026-10-07T12:00:09.000Z" }, { "id": 153679, "urlhaus_id": "3944234", "url": "http://210.208.110.51:35100/bin.sh", "host": "210.208.110.51", "host_ip": "210.208.110.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 12:00:09 UTC", "discovered_at": "2026-10-07T12:00:09.000Z" }, { "id": 153682, "urlhaus_id": "3944231", "url": "http://180.107.78.120:3588/i", "host": "180.107.78.120", "host_ip": "180.107.78.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 11:28:19 UTC", "discovered_at": "2026-10-07T11:28:19.000Z" }, { "id": 153684, "urlhaus_id": "3944229", "url": "http://216.9.224.45/30/img_224029.png", "host": "216.9.224.45", "host_ip": "216.9.224.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-07 11:11:19 UTC", "discovered_at": "2026-10-07T11:11:19.000Z" }, { "id": 153683, "urlhaus_id": "3944230", "url": "http://216.9.224.45/30/greenangelkings.js", "host": "216.9.224.45", "host_ip": "216.9.224.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, js, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-07 11:11:19 UTC", "discovered_at": "2026-10-07T11:11:19.000Z" }, { "id": 153686, "urlhaus_id": "3944227", "url": "http://216.9.224.45/30/bestwishesgivenmebesttings.htA", "host": "216.9.224.45", "host_ip": "216.9.224.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "hta, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-07 11:11:15 UTC", "discovered_at": "2026-10-07T11:11:15.000Z" }, { "id": 153685, "urlhaus_id": "3944228", "url": "https://deffnelreports.bramblequarz.ru/Ips.py", "host": "deffnelreports.bramblequarz.ru", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, py", "last_online": null, "first_seen": "2026-10-07 11:11:15 UTC", "discovered_at": "2026-10-07T11:11:15.000Z" }, { "id": 153687, "urlhaus_id": "3944226", "url": "http://60.18.58.38:34608/i", "host": "60.18.58.38", "host_ip": "60.18.58.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 11:02:21 UTC", "discovered_at": "2026-10-07T11:02:21.000Z" }, { "id": 153688, "urlhaus_id": "3944225", "url": "http://165.98.243.83:55771/bin.sh", "host": "165.98.243.83", "host_ip": "165.98.243.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 11:02:16 UTC", "discovered_at": "2026-10-07T11:02:16.000Z" }, { "id": 153691, "urlhaus_id": "3944222", "url": "http://58.47.106.128:39278/bin.sh", "host": "58.47.106.128", "host_ip": "58.47.106.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 10:47:16 UTC", "discovered_at": "2026-10-07T10:47:16.000Z" }, { "id": 153690, "urlhaus_id": "3944223", "url": "http://115.55.194.104:34014/i", "host": "115.55.194.104", "host_ip": "115.55.194.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 10:47:16 UTC", "discovered_at": "2026-10-07T10:47:16.000Z" }, { "id": 153689, "urlhaus_id": "3944224", "url": "http://175.43.173.18:38071/bin.sh", "host": "175.43.173.18", "host_ip": "175.43.173.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 10:47:16 UTC", "discovered_at": "2026-10-07T10:47:16.000Z" }, { "id": 153692, "urlhaus_id": "3944221", "url": "http://115.50.235.154:51244/bin.sh", "host": "115.50.235.154", "host_ip": "115.50.235.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 10:47:15 UTC", "discovered_at": "2026-10-07T10:47:15.000Z" }, { "id": 153693, "urlhaus_id": "3944220", "url": "http://105.224.5.39:39999/i", "host": "105.224.5.39", "host_ip": "105.224.5.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 10:46:18 UTC", "discovered_at": "2026-10-07T10:46:18.000Z" }, { "id": 153694, "urlhaus_id": "3944219", "url": "http://182.114.195.5:54356/i", "host": "182.114.195.5", "host_ip": "182.114.195.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 10:46:17 UTC", "discovered_at": "2026-10-07T10:46:17.000Z" }, { "id": 153698, "urlhaus_id": "3944215", "url": "http://119.179.237.222:49476/bin.sh", "host": "119.179.237.222", "host_ip": "119.179.237.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 10:17:14 UTC", "discovered_at": "2026-10-07T10:17:14.000Z" }, { "id": 153697, "urlhaus_id": "3944216", "url": "http://115.63.49.201:46360/i", "host": "115.63.49.201", "host_ip": "115.63.49.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 10:17:14 UTC", "discovered_at": "2026-10-07T10:17:14.000Z" }, { "id": 153696, "urlhaus_id": "3944217", "url": "http://123.11.234.79:52081/i", "host": "123.11.234.79", "host_ip": "123.11.234.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 10:17:14 UTC", "discovered_at": "2026-10-07T10:17:14.000Z" }, { "id": 153695, "urlhaus_id": "3944218", "url": "http://171.81.95.244:56237/i", "host": "171.81.95.244", "host_ip": "171.81.95.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 10:17:14 UTC", "discovered_at": "2026-10-07T10:17:14.000Z" }, { "id": 153699, "urlhaus_id": "3944214", "url": "http://182.114.195.5:54356/bin.sh", "host": "182.114.195.5", "host_ip": "182.114.195.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 10:17:13 UTC", "discovered_at": "2026-10-07T10:17:13.000Z" }, { "id": 153700, "urlhaus_id": "3944213", "url": "http://120.28.193.113:37131/i", "host": "120.28.193.113", "host_ip": "120.28.193.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 10:02:17 UTC", "discovered_at": "2026-10-07T10:02:17.000Z" }, { "id": 153701, "urlhaus_id": "3944212", "url": "http://115.63.144.176:53052/i", "host": "115.63.144.176", "host_ip": "115.63.144.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 10:01:15 UTC", "discovered_at": "2026-10-07T10:01:15.000Z" }, { "id": 153705, "urlhaus_id": "3944208", "url": "http://27.44.145.227:53273/i", "host": "27.44.145.227", "host_ip": "27.44.145.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 10:01:14 UTC", "discovered_at": "2026-10-07T10:01:14.000Z" }, { "id": 153704, "urlhaus_id": "3944209", "url": "http://112.248.141.165:35888/i", "host": "112.248.141.165", "host_ip": "112.248.141.165", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 10:01:14 UTC", "discovered_at": "2026-10-07T10:01:14.000Z" }, { "id": 153703, "urlhaus_id": "3944210", "url": "http://36.88.136.194:59849/i", "host": "36.88.136.194", "host_ip": "36.88.136.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 10:01:14 UTC", "discovered_at": "2026-10-07T10:01:14.000Z" }, { "id": 153702, "urlhaus_id": "3944211", "url": "http://27.44.145.227:53273/bin.sh", "host": "27.44.145.227", "host_ip": "27.44.145.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 10:01:14 UTC", "discovered_at": "2026-10-07T10:01:14.000Z" }, { "id": 153707, "urlhaus_id": "3944206", "url": "http://37.52.180.238:34777/i", "host": "37.52.180.238", "host_ip": "37.52.180.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 10:01:13 UTC", "discovered_at": "2026-10-07T10:01:13.000Z" }, { "id": 153706, "urlhaus_id": "3944207", "url": "http://116.139.99.176:37688/i", "host": "116.139.99.176", "host_ip": "116.139.99.176", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 10:01:13 UTC", "discovered_at": "2026-10-07T10:01:13.000Z" }, { "id": 153708, "urlhaus_id": "3944205", "url": "http://27.215.181.136:32832/bin.sh", "host": "27.215.181.136", "host_ip": "27.215.181.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 09:52:19 UTC", "discovered_at": "2026-10-07T09:52:19.000Z" }, { "id": 153709, "urlhaus_id": "3944204", "url": "http://59.180.159.171:39541/i", "host": "59.180.159.171", "host_ip": "59.180.159.171", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:40 UTC", "discovered_at": "2026-10-07T09:47:40.000Z" }, { "id": 153710, "urlhaus_id": "3944203", "url": "http://112.248.141.165:35888/bin.sh", "host": "112.248.141.165", "host_ip": "112.248.141.165", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:34 UTC", "discovered_at": "2026-10-07T09:47:34.000Z" }, { "id": 153711, "urlhaus_id": "3944202", "url": "http://196.191.104.3:53425/i", "host": "196.191.104.3", "host_ip": "196.191.104.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 09:47:22 UTC", "discovered_at": "2026-10-07T09:47:22.000Z" }, { "id": 153712, "urlhaus_id": "3944201", "url": "http://221.15.179.180:34467/i", "host": "221.15.179.180", "host_ip": "221.15.179.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:20 UTC", "discovered_at": "2026-10-07T09:47:20.000Z" }, { "id": 153713, "urlhaus_id": "3944200", "url": "http://116.55.2.151:49708/i", "host": "116.55.2.151", "host_ip": "116.55.2.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 09:47:18 UTC", "discovered_at": "2026-10-07T09:47:18.000Z" }, { "id": 153715, "urlhaus_id": "3944198", "url": "http://221.14.86.235:35190/i", "host": "221.14.86.235", "host_ip": "221.14.86.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:16 UTC", "discovered_at": "2026-10-07T09:47:16.000Z" }, { "id": 153714, "urlhaus_id": "3944199", "url": "http://222.134.173.157:38282/i", "host": "222.134.173.157", "host_ip": "222.134.173.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:16 UTC", "discovered_at": "2026-10-07T09:47:16.000Z" }, { "id": 153728, "urlhaus_id": "3944185", "url": "http://175.165.81.126:43423/i", "host": "175.165.81.126", "host_ip": "175.165.81.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153727, "urlhaus_id": "3944186", "url": "http://116.139.99.176:37688/bin.sh", "host": "116.139.99.176", "host_ip": "116.139.99.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153726, "urlhaus_id": "3944187", "url": "http://27.220.213.206:38698/bin.sh", "host": "27.220.213.206", "host_ip": "27.220.213.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153725, "urlhaus_id": "3944188", "url": "http://222.246.108.59:44574/i", "host": "222.246.108.59", "host_ip": "222.246.108.59", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153724, "urlhaus_id": "3944189", "url": "http://210.208.110.51:35100/i", "host": "210.208.110.51", "host_ip": "210.208.110.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153723, "urlhaus_id": "3944190", "url": "http://113.238.229.213:41846/i", "host": "113.238.229.213", "host_ip": "113.238.229.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153722, "urlhaus_id": "3944191", "url": "http://5.26.131.236:50166/i", "host": "5.26.131.236", "host_ip": "5.26.131.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153721, "urlhaus_id": "3944192", "url": "http://182.121.179.96:54068/i", "host": "182.121.179.96", "host_ip": "182.121.179.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153720, "urlhaus_id": "3944193", "url": "http://120.84.215.208:45931/i", "host": "120.84.215.208", "host_ip": "120.84.215.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153719, "urlhaus_id": "3944194", "url": "http://61.53.72.71:41384/i", "host": "61.53.72.71", "host_ip": "61.53.72.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153718, "urlhaus_id": "3944195", "url": "http://219.157.176.43:34554/i", "host": "219.157.176.43", "host_ip": "219.157.176.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153717, "urlhaus_id": "3944196", "url": "http://42.227.133.167:51698/i", "host": "42.227.133.167", "host_ip": "42.227.133.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153716, "urlhaus_id": "3944197", "url": "http://123.11.234.79:52081/bin.sh", "host": "123.11.234.79", "host_ip": "123.11.234.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:15 UTC", "discovered_at": "2026-10-07T09:47:15.000Z" }, { "id": 153729, "urlhaus_id": "3944184", "url": "http://175.165.82.32:36258/i", "host": "175.165.82.32", "host_ip": "175.165.82.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:14 UTC", "discovered_at": "2026-10-07T09:47:14.000Z" }, { "id": 153730, "urlhaus_id": "3944183", "url": "http://112.248.113.232:40583/i", "host": "112.248.113.232", "host_ip": "112.248.113.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:13 UTC", "discovered_at": "2026-10-07T09:47:13.000Z" }, { "id": 153731, "urlhaus_id": "3944182", "url": "http://37.52.180.238:34777/bin.sh", "host": "37.52.180.238", "host_ip": "37.52.180.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:47:12 UTC", "discovered_at": "2026-10-07T09:47:12.000Z" }, { "id": 153732, "urlhaus_id": "3944181", "url": "http://95.15.69.204:43425/i", "host": "95.15.69.204", "host_ip": "95.15.69.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 09:47:09 UTC", "discovered_at": "2026-10-07T09:47:09.000Z" }, { "id": 153735, "urlhaus_id": "3944178", "url": "http://222.139.36.194:60541/i", "host": "222.139.36.194", "host_ip": "222.139.36.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:46:20 UTC", "discovered_at": "2026-10-07T09:46:20.000Z" }, { "id": 153734, "urlhaus_id": "3944179", "url": "http://39.87.126.131:54912/i", "host": "39.87.126.131", "host_ip": "39.87.126.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:46:20 UTC", "discovered_at": "2026-10-07T09:46:20.000Z" }, { "id": 153733, "urlhaus_id": "3944180", "url": "http://115.63.78.29:58952/i", "host": "115.63.78.29", "host_ip": "115.63.78.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 09:46:20 UTC", "discovered_at": "2026-10-07T09:46:20.000Z" }, { "id": 153736, "urlhaus_id": "3944177", "url": "http://196.189.69.192:38461/i", "host": "196.189.69.192", "host_ip": "196.189.69.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 09:46:19 UTC", "discovered_at": "2026-10-07T09:46:19.000Z" }, { "id": 153737, "urlhaus_id": "3944176", "url": "http://103.179.240.227:51700/i", "host": "103.179.240.227", "host_ip": "103.179.240.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 09:45:05 UTC", "discovered_at": "2026-10-07T09:45:05.000Z" }, { "id": 153738, "urlhaus_id": "3944175", "url": "http://112.248.113.232:40583/bin.sh", "host": "112.248.113.232", "host_ip": "112.248.113.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 07:47:11 UTC", "discovered_at": "2026-10-07T07:47:11.000Z" }, { "id": 153739, "urlhaus_id": "3944174", "url": "http://103.179.240.227:51700/bin.sh", "host": "103.179.240.227", "host_ip": "103.179.240.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 07:34:25 UTC", "discovered_at": "2026-10-07T07:34:25.000Z" }, { "id": 153740, "urlhaus_id": "3944173", "url": "http://125.161.1.232:58379/i", "host": "125.161.1.232", "host_ip": "125.161.1.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:32:41 UTC", "discovered_at": "2026-10-07T07:32:41.000Z" }, { "id": 153741, "urlhaus_id": "3944172", "url": "http://182.113.6.188:55101/i", "host": "182.113.6.188", "host_ip": "182.113.6.188", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 07:32:26 UTC", "discovered_at": "2026-10-07T07:32:26.000Z" }, { "id": 153743, "urlhaus_id": "3944170", "url": "http://115.63.51.182:33921/bin.sh", "host": "115.63.51.182", "host_ip": "115.63.51.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 07:32:25 UTC", "discovered_at": "2026-10-07T07:32:25.000Z" }, { "id": 153742, "urlhaus_id": "3944171", "url": "http://180.191.40.108:37202/i", "host": "180.191.40.108", "host_ip": "180.191.40.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:32:25 UTC", "discovered_at": "2026-10-07T07:32:25.000Z" }, { "id": 153744, "urlhaus_id": "3944169", "url": "http://41.216.227.66:51974/i", "host": "41.216.227.66", "host_ip": "41.216.227.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 07:17:16 UTC", "discovered_at": "2026-10-07T07:17:16.000Z" }, { "id": 153746, "urlhaus_id": "3944167", "url": "http://45.172.218.181:45893/bin.sh", "host": "45.172.218.181", "host_ip": "45.172.218.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:17:10 UTC", "discovered_at": "2026-10-07T07:17:10.000Z" }, { "id": 153745, "urlhaus_id": "3944168", "url": "http://180.245.56.243:55104/i", "host": "180.245.56.243", "host_ip": "180.245.56.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:17:10 UTC", "discovered_at": "2026-10-07T07:17:10.000Z" }, { "id": 153748, "urlhaus_id": "3944165", "url": "http://175.165.87.230:44570/i", "host": "175.165.87.230", "host_ip": "175.165.87.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 07:17:09 UTC", "discovered_at": "2026-10-07T07:17:09.000Z" }, { "id": 153747, "urlhaus_id": "3944166", "url": "http://114.227.65.175:51491/i", "host": "114.227.65.175", "host_ip": "114.227.65.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:17:09 UTC", "discovered_at": "2026-10-07T07:17:09.000Z" }, { "id": 153749, "urlhaus_id": "3944164", "url": "http://23.254.195.48:8099/bx_amd64.p", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-07 07:15:25 UTC", "discovered_at": "2026-10-07T07:15:25.000Z" }, { "id": 153750, "urlhaus_id": "3944163", "url": "http://112.248.101.66:55265/bin.sh", "host": "112.248.101.66", "host_ip": "112.248.101.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 07:07:18 UTC", "discovered_at": "2026-10-07T07:07:18.000Z" }, { "id": 153751, "urlhaus_id": "3944162", "url": "http://119.179.237.222:49476/i", "host": "119.179.237.222", "host_ip": "119.179.237.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 07:03:08 UTC", "discovered_at": "2026-10-07T07:03:08.000Z" }, { "id": 153755, "urlhaus_id": "3944158", "url": "http://175.165.87.230:44570/bin.sh", "host": "175.165.87.230", "host_ip": "175.165.87.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 07:02:11 UTC", "discovered_at": "2026-10-07T07:02:11.000Z" }, { "id": 153754, "urlhaus_id": "3944159", "url": "http://14.221.238.62:59076/i", "host": "14.221.238.62", "host_ip": "14.221.238.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 07:02:11 UTC", "discovered_at": "2026-10-07T07:02:11.000Z" }, { "id": 153753, "urlhaus_id": "3944160", "url": "http://180.245.56.243:55104/bin.sh", "host": "180.245.56.243", "host_ip": "180.245.56.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:02:11 UTC", "discovered_at": "2026-10-07T07:02:11.000Z" }, { "id": 153752, "urlhaus_id": "3944161", "url": "http://114.227.65.175:51491/bin.sh", "host": "114.227.65.175", "host_ip": "114.227.65.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:02:11 UTC", "discovered_at": "2026-10-07T07:02:11.000Z" }, { "id": 153757, "urlhaus_id": "3944156", "url": "http://196.189.96.59:60551/i", "host": "196.189.96.59", "host_ip": "196.189.96.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 07:02:10 UTC", "discovered_at": "2026-10-07T07:02:10.000Z" }, { "id": 153756, "urlhaus_id": "3944157", "url": "http://123.12.20.207:47682/i", "host": "123.12.20.207", "host_ip": "123.12.20.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 07:02:10 UTC", "discovered_at": "2026-10-07T07:02:10.000Z" }, { "id": 153758, "urlhaus_id": "3944155", "url": "http://123.12.20.207:47682/bin.sh", "host": "123.12.20.207", "host_ip": "123.12.20.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 06:33:32 UTC", "discovered_at": "2026-10-07T06:33:32.000Z" }, { "id": 153759, "urlhaus_id": "3944154", "url": "http://182.124.121.111:40805/bin.sh", "host": "182.124.121.111", "host_ip": "182.124.121.111", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 06:32:52 UTC", "discovered_at": "2026-10-07T06:32:52.000Z" }, { "id": 153761, "urlhaus_id": "3944152", "url": "http://222.138.151.54:55365/i", "host": "222.138.151.54", "host_ip": "222.138.151.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 06:32:47 UTC", "discovered_at": "2026-10-07T06:32:47.000Z" }, { "id": 153760, "urlhaus_id": "3944153", "url": "http://27.220.213.206:38698/i", "host": "27.220.213.206", "host_ip": "27.220.213.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 06:32:47 UTC", "discovered_at": "2026-10-07T06:32:47.000Z" }, { "id": 153763, "urlhaus_id": "3944150", "url": "http://61.53.83.129:58022/i", "host": "61.53.83.129", "host_ip": "61.53.83.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 06:32:46 UTC", "discovered_at": "2026-10-07T06:32:46.000Z" }, { "id": 153762, "urlhaus_id": "3944151", "url": "http://125.40.158.189:39181/i", "host": "125.40.158.189", "host_ip": "125.40.158.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 06:32:46 UTC", "discovered_at": "2026-10-07T06:32:46.000Z" }, { "id": 153766, "urlhaus_id": "3944147", "url": "http://138.204.196.254:47936/i", "host": "138.204.196.254", "host_ip": "138.204.196.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 06:16:49 UTC", "discovered_at": "2026-10-07T06:16:49.000Z" }, { "id": 153765, "urlhaus_id": "3944148", "url": "http://175.147.200.123:48168/bin.sh", "host": "175.147.200.123", "host_ip": "175.147.200.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 06:16:49 UTC", "discovered_at": "2026-10-07T06:16:49.000Z" }, { "id": 153764, "urlhaus_id": "3944149", "url": "http://175.165.82.246:53655/i", "host": "175.165.82.246", "host_ip": "175.165.82.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 06:16:49 UTC", "discovered_at": "2026-10-07T06:16:49.000Z" }, { "id": 153768, "urlhaus_id": "3944145", "url": "http://37.26.86.216:38777/i", "host": "37.26.86.216", "host_ip": "37.26.86.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 06:16:48 UTC", "discovered_at": "2026-10-07T06:16:48.000Z" }, { "id": 153767, "urlhaus_id": "3944146", "url": "http://115.50.216.143:39292/bin.sh", "host": "115.50.216.143", "host_ip": "115.50.216.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 06:16:48 UTC", "discovered_at": "2026-10-07T06:16:48.000Z" }, { "id": 153770, "urlhaus_id": "3944143", "url": "http://125.40.158.189:39181/bin.sh", "host": "125.40.158.189", "host_ip": "125.40.158.189", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 06:02:36 UTC", "discovered_at": "2026-10-07T06:02:36.000Z" }, { "id": 153769, "urlhaus_id": "3944144", "url": "http://105.224.249.40:57651/i", "host": "105.224.249.40", "host_ip": "105.224.249.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 06:02:36 UTC", "discovered_at": "2026-10-07T06:02:36.000Z" }, { "id": 153772, "urlhaus_id": "3944141", "url": "http://221.202.234.182:37616/i", "host": "221.202.234.182", "host_ip": "221.202.234.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 05:47:42 UTC", "discovered_at": "2026-10-07T05:47:42.000Z" }, { "id": 153771, "urlhaus_id": "3944142", "url": "http://182.114.34.128:51716/i", "host": "182.114.34.128", "host_ip": "182.114.34.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 05:47:42 UTC", "discovered_at": "2026-10-07T05:47:42.000Z" }, { "id": 153774, "urlhaus_id": "3944139", "url": "http://37.26.86.216:38777/bin.sh", "host": "37.26.86.216", "host_ip": "37.26.86.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 05:47:41 UTC", "discovered_at": "2026-10-07T05:47:41.000Z" }, { "id": 153773, "urlhaus_id": "3944140", "url": "http://42.86.117.7:34873/i", "host": "42.86.117.7", "host_ip": "42.86.117.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 05:47:41 UTC", "discovered_at": "2026-10-07T05:47:41.000Z" }, { "id": 153775, "urlhaus_id": "3944138", "url": "http://202.1.26.13:44204/i", "host": "202.1.26.13", "host_ip": "202.1.26.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 05:33:49 UTC", "discovered_at": "2026-10-07T05:33:49.000Z" }, { "id": 153777, "urlhaus_id": "3944136", "url": "http://113.221.14.251:35903/i", "host": "113.221.14.251", "host_ip": "113.221.14.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 05:32:44 UTC", "discovered_at": "2026-10-07T05:32:44.000Z" }, { "id": 153776, "urlhaus_id": "3944137", "url": "http://59.97.252.95:51706/bin.sh", "host": "59.97.252.95", "host_ip": "59.97.252.95", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 05:32:44 UTC", "discovered_at": "2026-10-07T05:32:44.000Z" }, { "id": 153778, "urlhaus_id": "3944135", "url": "http://175.147.94.199:51805/bin.sh", "host": "175.147.94.199", "host_ip": "175.147.94.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 05:32:43 UTC", "discovered_at": "2026-10-07T05:32:43.000Z" }, { "id": 153779, "urlhaus_id": "3944134", "url": "http://60.16.135.182:50504/bin.sh", "host": "60.16.135.182", "host_ip": "60.16.135.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 05:32:42 UTC", "discovered_at": "2026-10-07T05:32:42.000Z" }, { "id": 153781, "urlhaus_id": "3944132", "url": "http://123.9.200.156:42154/i", "host": "123.9.200.156", "host_ip": "123.9.200.156", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 05:02:35 UTC", "discovered_at": "2026-10-07T05:02:35.000Z" }, { "id": 153780, "urlhaus_id": "3944133", "url": "http://119.187.197.115:57303/i", "host": "119.187.197.115", "host_ip": "119.187.197.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 05:02:35 UTC", "discovered_at": "2026-10-07T05:02:35.000Z" }, { "id": 153782, "urlhaus_id": "3944131", "url": "http://95.9.35.137:40441/i", "host": "95.9.35.137", "host_ip": "95.9.35.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 04:55:51 UTC", "discovered_at": "2026-10-07T04:55:51.000Z" }, { "id": 153783, "urlhaus_id": "3944130", "url": "https://donutclients.st/TotemCounter-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:55:41 UTC", "discovered_at": "2026-10-07T04:55:41.000Z" }, { "id": 153785, "urlhaus_id": "3944128", "url": "http://154.242.13.34:43259/i", "host": "154.242.13.34", "host_ip": "154.242.13.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:55:39 UTC", "discovered_at": "2026-10-07T04:55:39.000Z" }, { "id": 153784, "urlhaus_id": "3944129", "url": "http://115.62.186.251:52572/i", "host": "115.62.186.251", "host_ip": "115.62.186.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:55:39 UTC", "discovered_at": "2026-10-07T04:55:39.000Z" }, { "id": 153786, "urlhaus_id": "3944127", "url": "http://115.55.229.99:46995/i", "host": "115.55.229.99", "host_ip": "115.55.229.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:55:38 UTC", "discovered_at": "2026-10-07T04:55:38.000Z" }, { "id": 153787, "urlhaus_id": "3944126", "url": "http://185.89.156.101:35112/bin.sh", "host": "185.89.156.101", "host_ip": "185.89.156.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 04:55:36 UTC", "discovered_at": "2026-10-07T04:55:36.000Z" }, { "id": 153788, "urlhaus_id": "3944125", "url": "https://www.dropbox.com/scl/fi/jnf0ecydm1z63frnge1mn/Docsend.exe?rlkey=01seodht5j6nnix645ejn3a5r&st=vcdaxsj2&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook, rat, stealer", "last_online": null, "first_seen": "2026-10-07 04:49:45 UTC", "discovered_at": "2026-10-07T04:49:45.000Z" }, { "id": 153789, "urlhaus_id": "3944124", "url": "https://www.dropbox.com/scl/fi/dcbo57pem0pjqzx65giot/MateFalls-Setup-1.0.0.exe?rlkey=yc7kc4vm6iy1urr0wh1xwta91&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Dropbox, java, MateFalls, stealer, infostealer", "last_online": null, "first_seen": "2026-10-07 04:49:44 UTC", "discovered_at": "2026-10-07T04:49:44.000Z" }, { "id": 153790, "urlhaus_id": "3944123", "url": "https://xiazailianjie.com/WPS_Setup_X64.zip", "host": "xiazailianjie.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilverFox, ValleyRAT", "last_online": null, "first_seen": "2026-10-07 04:49:18 UTC", "discovered_at": "2026-10-07T04:49:18.000Z" }, { "id": 153791, "urlhaus_id": "3944122", "url": "https://www.dropbox.com/scl/fi/jwhb6vojim0cfxrxip9fk/Docsend.exe?rlkey=zgpwwjbtsrnatafb9g24pjnxu&st=gwds3ryx&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Dropbox, IRAHook, rat", "last_online": null, "first_seen": "2026-10-07 04:49:14 UTC", "discovered_at": "2026-10-07T04:49:14.000Z" }, { "id": 153792, "urlhaus_id": "3944121", "url": "https://stellaspicy.org/2026scrill/client.jar", "host": "stellaspicy.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "runelure", "last_online": null, "first_seen": "2026-10-07 04:41:53 UTC", "discovered_at": "2026-10-07T04:41:53.000Z" }, { "id": 153799, "urlhaus_id": "3944114", "url": "http://23.254.195.48:8099/beacon_x", "host": "23.254.195.48", "host_ip": "23.254.195.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "docker, elf", "last_online": null, "first_seen": "2026-10-07 04:41:31 UTC", "discovered_at": "2026-10-07T04:41:31.000Z" }, { "id": 153798, "urlhaus_id": "3944115", "url": "https://donutdupe.com/DonutDupe-26.2.jar", "host": "donutdupe.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer", "last_online": null, "first_seen": "2026-10-07 04:41:31 UTC", "discovered_at": "2026-10-07T04:41:31.000Z" }, { "id": 153797, "urlhaus_id": "3944116", "url": "https://stellaspicy.org/2026scrill/RuneLite.exe", "host": "stellaspicy.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "runelure", "last_online": null, "first_seen": "2026-10-07 04:41:31 UTC", "discovered_at": "2026-10-07T04:41:31.000Z" }, { "id": 153796, "urlhaus_id": "3944117", "url": "https://donutclients.st/krypton-client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:31 UTC", "discovered_at": "2026-10-07T04:41:31.000Z" }, { "id": 153795, "urlhaus_id": "3944118", "url": "https://donutclients.st/radium-client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:31 UTC", "discovered_at": "2026-10-07T04:41:31.000Z" }, { "id": 153794, "urlhaus_id": "3944119", "url": "https://donutclients.st/Shulker_Box_Tooltip-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:31 UTC", "discovered_at": "2026-10-07T04:41:31.000Z" }, { "id": 153793, "urlhaus_id": "3944120", "url": "https://donutclients.st/alycone-client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:31 UTC", "discovered_at": "2026-10-07T04:41:31.000Z" }, { "id": 153800, "urlhaus_id": "3944113", "url": "https://donutclients.st/gamble-rig-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:30 UTC", "discovered_at": "2026-10-07T04:41:30.000Z" }, { "id": 153801, "urlhaus_id": "3944112", "url": "http://182.121.16.69:49873/Mozi.m", "host": "182.121.16.69", "host_ip": "182.121.16.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 04:41:28 UTC", "discovered_at": "2026-10-07T04:41:28.000Z" }, { "id": 153802, "urlhaus_id": "3944111", "url": "https://donutclients.st/Radon-Client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:22 UTC", "discovered_at": "2026-10-07T04:41:22.000Z" }, { "id": 153803, "urlhaus_id": "3944110", "url": "https://donutclients.st/glazed-client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:21 UTC", "discovered_at": "2026-10-07T04:41:21.000Z" }, { "id": 153806, "urlhaus_id": "3944107", "url": "https://donutclients.st/meteor-client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:16 UTC", "discovered_at": "2026-10-07T04:41:16.000Z" }, { "id": 153805, "urlhaus_id": "3944108", "url": "http://123.12.245.227:36522/bin.sh", "host": "123.12.245.227", "host_ip": "123.12.245.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 04:41:16 UTC", "discovered_at": "2026-10-07T04:41:16.000Z" }, { "id": 153804, "urlhaus_id": "3944109", "url": "https://donutclients.st/Nova-Client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:16 UTC", "discovered_at": "2026-10-07T04:41:16.000Z" }, { "id": 153809, "urlhaus_id": "3944104", "url": "https://donutclients.st/freelook-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:13 UTC", "discovered_at": "2026-10-07T04:41:13.000Z" }, { "id": 153808, "urlhaus_id": "3944105", "url": "https://donutclients.st/donutExtras-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:13 UTC", "discovered_at": "2026-10-07T04:41:13.000Z" }, { "id": 153807, "urlhaus_id": "3944106", "url": "https://donutclients.st/Mouse_Tweaks-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:13 UTC", "discovered_at": "2026-10-07T04:41:13.000Z" }, { "id": 153813, "urlhaus_id": "3944100", "url": "https://donutclients.st/appleskin-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:12 UTC", "discovered_at": "2026-10-07T04:41:12.000Z" }, { "id": 153812, "urlhaus_id": "3944101", "url": "https://donutclients.st/Iris-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:12 UTC", "discovered_at": "2026-10-07T04:41:12.000Z" }, { "id": 153811, "urlhaus_id": "3944102", "url": "https://donutclients.st/FerriteCore-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:12 UTC", "discovered_at": "2026-10-07T04:41:12.000Z" }, { "id": 153810, "urlhaus_id": "3944103", "url": "https://donutclients.st/Baritone-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:12 UTC", "discovered_at": "2026-10-07T04:41:12.000Z" }, { "id": 153818, "urlhaus_id": "3944095", "url": "https://donutclients.st/NuclearAddons-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:11 UTC", "discovered_at": "2026-10-07T04:41:11.000Z" }, { "id": 153817, "urlhaus_id": "3944096", "url": "https://donutclients.st/Sodium-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:11 UTC", "discovered_at": "2026-10-07T04:41:11.000Z" }, { "id": 153816, "urlhaus_id": "3944097", "url": "https://donutclients.st/ZincAddons-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:11 UTC", "discovered_at": "2026-10-07T04:41:11.000Z" }, { "id": 153815, "urlhaus_id": "3944098", "url": "https://donutclients.st/Litematica-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:11 UTC", "discovered_at": "2026-10-07T04:41:11.000Z" }, { "id": 153814, "urlhaus_id": "3944099", "url": "https://donutclients.st/bamboo-client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:11 UTC", "discovered_at": "2026-10-07T04:41:11.000Z" }, { "id": 153821, "urlhaus_id": "3944092", "url": "https://donutclients.st/donut-duper-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:10 UTC", "discovered_at": "2026-10-07T04:41:10.000Z" }, { "id": 153820, "urlhaus_id": "3944093", "url": "https://donutclients.st/Lithium-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:10 UTC", "discovered_at": "2026-10-07T04:41:10.000Z" }, { "id": 153819, "urlhaus_id": "3944094", "url": "https://donutdupe.com/DonutDupe-1.21.11.jar", "host": "donutdupe.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer", "last_online": null, "first_seen": "2026-10-07 04:41:10 UTC", "discovered_at": "2026-10-07T04:41:10.000Z" }, { "id": 153823, "urlhaus_id": "3944090", "url": "https://docs.cs-supplements.de/api/cm-token", "host": "docs.cs-supplements.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-07 04:41:08 UTC", "discovered_at": "2026-10-07T04:41:08.000Z" }, { "id": 153822, "urlhaus_id": "3944091", "url": "https://ikovrsps.com/gamefiles/image.exe", "host": "ikovrsps.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "runelite, runelure, stealer", "last_online": null, "first_seen": "2026-10-07 04:41:08 UTC", "discovered_at": "2026-10-07T04:41:08.000Z" }, { "id": 153827, "urlhaus_id": "3944086", "url": "https://donutclients.st/Zoomify-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:07 UTC", "discovered_at": "2026-10-07T04:41:07.000Z" }, { "id": 153826, "urlhaus_id": "3944087", "url": "https://donutclients.st/Xaeros_Minimap-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:07 UTC", "discovered_at": "2026-10-07T04:41:07.000Z" }, { "id": 153825, "urlhaus_id": "3944088", "url": "https://donutclients.st/TierTagger-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:07 UTC", "discovered_at": "2026-10-07T04:41:07.000Z" }, { "id": 153824, "urlhaus_id": "3944089", "url": "https://github.com/zav001/534rkyoj34oiy/releases/download/T/DonutClient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-07 04:41:07 UTC", "discovered_at": "2026-10-07T04:41:07.000Z" }, { "id": 153833, "urlhaus_id": "3944080", "url": "https://donutclients.st/bnana-client-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:06 UTC", "discovered_at": "2026-10-07T04:41:06.000Z" }, { "id": 153832, "urlhaus_id": "3944081", "url": "https://github.com/zav001/D3et2t23y3/releases/download/v1/GoobaaClient.1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-07 04:41:06 UTC", "discovered_at": "2026-10-07T04:41:06.000Z" }, { "id": 153831, "urlhaus_id": "3944082", "url": "http://144.31.150.183/5r3fqt67ew531has4231.arm", "host": "144.31.150.183", "host_ip": "144.31.150.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, mirai", "last_online": null, "first_seen": "2026-10-07 04:41:06 UTC", "discovered_at": "2026-10-07T04:41:06.000Z" }, { "id": 153830, "urlhaus_id": "3944083", "url": "https://donutclients.st/WorldEdit-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:06 UTC", "discovered_at": "2026-10-07T04:41:06.000Z" }, { "id": 153829, "urlhaus_id": "3944084", "url": "https://ikovrsps.com/Mina.jar", "host": "ikovrsps.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner, runelite, runelure, stealer", "last_online": null, "first_seen": "2026-10-07 04:41:06 UTC", "discovered_at": "2026-10-07T04:41:06.000Z" }, { "id": 153828, "urlhaus_id": "3944085", "url": "https://donutclients.st/ExploitPreventer-26.2.jar", "host": "donutclients.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, java, stealer, vm", "last_online": null, "first_seen": "2026-10-07 04:41:06 UTC", "discovered_at": "2026-10-07T04:41:06.000Z" }, { "id": 153834, "urlhaus_id": "3944079", "url": "https://github.com/alex3430/pecky777/blob/main/peckycloner.py", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "python", "last_online": null, "first_seen": "2026-10-07 04:40:55 UTC", "discovered_at": "2026-10-07T04:40:55.000Z" }, { "id": 153835, "urlhaus_id": "3944078", "url": "https://docsend.com/view/b757zwtqgif66uar", "host": "docsend.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook, rat", "last_online": null, "first_seen": "2026-10-07 04:40:50 UTC", "discovered_at": "2026-10-07T04:40:50.000Z" }, { "id": 153836, "urlhaus_id": "3944077", "url": "https://github.com/alex3430/pecky777/peckycloner.py", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Script-Kiddie Python", "last_online": null, "first_seen": "2026-10-07 04:40:33 UTC", "discovered_at": "2026-10-07T04:40:33.000Z" }, { "id": 153837, "urlhaus_id": "3944076", "url": "http://b.clu-e.eu/b2f628/cronb.sh", "host": "b.clu-e.eu", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, sh", "last_online": null, "first_seen": "2026-10-07 04:40:29 UTC", "discovered_at": "2026-10-07T04:40:29.000Z" }, { "id": 153838, "urlhaus_id": "3944075", "url": "https://cdn.discordapp.com/attachments/1521843051192909974/1557082337735475301/bundle.zip?ex=6ac6816e&is=6ac52fee&hm=50797e9782aac04b40538d9ee9d26c6295597c9db1eb374572ffddf733d329bd&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-07 04:39:41 UTC", "discovered_at": "2026-10-07T04:39:41.000Z" }, { "id": 153839, "urlhaus_id": "3944074", "url": "http://123.9.200.156:42154/bin.sh", "host": "123.9.200.156", "host_ip": "123.9.200.156", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:32:56 UTC", "discovered_at": "2026-10-07T04:32:56.000Z" }, { "id": 153840, "urlhaus_id": "3944073", "url": "http://117.146.92.46:54853/i", "host": "117.146.92.46", "host_ip": "117.146.92.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 04:32:51 UTC", "discovered_at": "2026-10-07T04:32:51.000Z" }, { "id": 153841, "urlhaus_id": "3944072", "url": "http://120.28.194.92:51526/i", "host": "120.28.194.92", "host_ip": "120.28.194.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 04:32:50 UTC", "discovered_at": "2026-10-07T04:32:50.000Z" }, { "id": 153842, "urlhaus_id": "3944071", "url": "http://221.15.187.244:35517/i", "host": "221.15.187.244", "host_ip": "221.15.187.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:32:49 UTC", "discovered_at": "2026-10-07T04:32:49.000Z" }, { "id": 153843, "urlhaus_id": "3944070", "url": "http://182.118.189.126:40792/i", "host": "182.118.189.126", "host_ip": "182.118.189.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:17:40 UTC", "discovered_at": "2026-10-07T04:17:40.000Z" }, { "id": 153846, "urlhaus_id": "3944067", "url": "http://210.97.100.192:33082/i", "host": "210.97.100.192", "host_ip": "210.97.100.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 04:17:38 UTC", "discovered_at": "2026-10-07T04:17:38.000Z" }, { "id": 153845, "urlhaus_id": "3944068", "url": "http://221.15.187.244:35517/bin.sh", "host": "221.15.187.244", "host_ip": "221.15.187.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:17:38 UTC", "discovered_at": "2026-10-07T04:17:38.000Z" }, { "id": 153844, "urlhaus_id": "3944069", "url": "http://123.14.88.160:36914/i", "host": "123.14.88.160", "host_ip": "123.14.88.160", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:17:38 UTC", "discovered_at": "2026-10-07T04:17:38.000Z" }, { "id": 153848, "urlhaus_id": "3944065", "url": "http://42.224.98.161:41233/bin.sh", "host": "42.224.98.161", "host_ip": "42.224.98.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 04:03:33 UTC", "discovered_at": "2026-10-07T04:03:33.000Z" }, { "id": 153847, "urlhaus_id": "3944066", "url": "http://117.146.92.46:54853/bin.sh", "host": "117.146.92.46", "host_ip": "117.146.92.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 04:03:33 UTC", "discovered_at": "2026-10-07T04:03:33.000Z" }, { "id": 153849, "urlhaus_id": "3944064", "url": "http://125.161.250.191:33986/i", "host": "125.161.250.191", "host_ip": "125.161.250.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 04:02:32 UTC", "discovered_at": "2026-10-07T04:02:32.000Z" }, { "id": 153852, "urlhaus_id": "3944061", "url": "http://60.18.37.74:39377/i", "host": "60.18.37.74", "host_ip": "60.18.37.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 04:02:31 UTC", "discovered_at": "2026-10-07T04:02:31.000Z" }, { "id": 153851, "urlhaus_id": "3944062", "url": "http://61.137.200.25:38220/bin.sh", "host": "61.137.200.25", "host_ip": "61.137.200.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 04:02:31 UTC", "discovered_at": "2026-10-07T04:02:31.000Z" }, { "id": 153850, "urlhaus_id": "3944063", "url": "http://120.28.194.92:51526/bin.sh", "host": "120.28.194.92", "host_ip": "120.28.194.92", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 04:02:31 UTC", "discovered_at": "2026-10-07T04:02:31.000Z" }, { "id": 153855, "urlhaus_id": "3944058", "url": "http://42.239.238.224:40215/bin.sh", "host": "42.239.238.224", "host_ip": "42.239.238.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 03:47:32 UTC", "discovered_at": "2026-10-07T03:47:32.000Z" }, { "id": 153854, "urlhaus_id": "3944059", "url": "http://120.28.192.219:39732/i", "host": "120.28.192.219", "host_ip": "120.28.192.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 03:47:32 UTC", "discovered_at": "2026-10-07T03:47:32.000Z" }, { "id": 153853, "urlhaus_id": "3944060", "url": "http://60.18.37.74:39377/bin.sh", "host": "60.18.37.74", "host_ip": "60.18.37.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 03:47:32 UTC", "discovered_at": "2026-10-07T03:47:32.000Z" }, { "id": 153856, "urlhaus_id": "3944057", "url": "http://27.44.145.183:32947/i", "host": "27.44.145.183", "host_ip": "27.44.145.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 03:32:40 UTC", "discovered_at": "2026-10-07T03:32:40.000Z" }, { "id": 153857, "urlhaus_id": "3944056", "url": "http://175.173.2.43:32996/i", "host": "175.173.2.43", "host_ip": "175.173.2.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 03:32:33 UTC", "discovered_at": "2026-10-07T03:32:33.000Z" }, { "id": 153859, "urlhaus_id": "3944054", "url": "http://222.127.71.33:40089/bin.sh", "host": "222.127.71.33", "host_ip": "222.127.71.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 03:32:30 UTC", "discovered_at": "2026-10-07T03:32:30.000Z" }, { "id": 153858, "urlhaus_id": "3944055", "url": "http://222.141.105.180:56903/bin.sh", "host": "222.141.105.180", "host_ip": "222.141.105.180", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 03:32:30 UTC", "discovered_at": "2026-10-07T03:32:30.000Z" }, { "id": 153860, "urlhaus_id": "3944053", "url": "http://194.26.220.214:34097/i", "host": "194.26.220.214", "host_ip": "194.26.220.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 03:26:27 UTC", "discovered_at": "2026-10-07T03:26:27.000Z" }, { "id": 153861, "urlhaus_id": "3944052", "url": "http://60.23.238.68:48081/i", "host": "60.23.238.68", "host_ip": "60.23.238.68", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 03:17:33 UTC", "discovered_at": "2026-10-07T03:17:33.000Z" }, { "id": 153863, "urlhaus_id": "3944050", "url": "http://42.227.46.64:39218/i", "host": "42.227.46.64", "host_ip": "42.227.46.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 03:17:29 UTC", "discovered_at": "2026-10-07T03:17:29.000Z" }, { "id": 153862, "urlhaus_id": "3944051", "url": "http://105.224.12.172:32809/i", "host": "105.224.12.172", "host_ip": "105.224.12.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 03:17:29 UTC", "discovered_at": "2026-10-07T03:17:29.000Z" }, { "id": 153864, "urlhaus_id": "3944049", "url": "http://27.210.7.195:44939/bin.sh", "host": "27.210.7.195", "host_ip": "27.210.7.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 03:17:28 UTC", "discovered_at": "2026-10-07T03:17:28.000Z" }, { "id": 153865, "urlhaus_id": "3944048", "url": "http://39.77.172.19:45028/i", "host": "39.77.172.19", "host_ip": "39.77.172.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 03:09:27 UTC", "discovered_at": "2026-10-07T03:09:27.000Z" }, { "id": 153866, "urlhaus_id": "3944047", "url": "http://123.11.98.224:37931/bin.sh", "host": "123.11.98.224", "host_ip": "123.11.98.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 03:02:29 UTC", "discovered_at": "2026-10-07T03:02:29.000Z" }, { "id": 153867, "urlhaus_id": "3944046", "url": "http://42.238.246.42:35356/i", "host": "42.238.246.42", "host_ip": "42.238.246.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 03:02:28 UTC", "discovered_at": "2026-10-07T03:02:28.000Z" }, { "id": 153868, "urlhaus_id": "3944045", "url": "http://176.213.86.238:31654/bin.sh", "host": "176.213.86.238", "host_ip": "176.213.86.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 02:56:33 UTC", "discovered_at": "2026-10-07T02:56:33.000Z" }, { "id": 153869, "urlhaus_id": "3944044", "url": "http://60.23.235.155:58165/i", "host": "60.23.235.155", "host_ip": "60.23.235.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 02:55:32 UTC", "discovered_at": "2026-10-07T02:55:32.000Z" }, { "id": 153870, "urlhaus_id": "3944043", "url": "http://123.130.203.216:45701/i", "host": "123.130.203.216", "host_ip": "123.130.203.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 02:47:33 UTC", "discovered_at": "2026-10-07T02:47:33.000Z" }, { "id": 153872, "urlhaus_id": "3944041", "url": "http://60.23.239.66:35293/i", "host": "60.23.239.66", "host_ip": "60.23.239.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 02:47:32 UTC", "discovered_at": "2026-10-07T02:47:32.000Z" }, { "id": 153871, "urlhaus_id": "3944042", "url": "http://117.253.155.54:60752/bin.sh", "host": "117.253.155.54", "host_ip": "117.253.155.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 02:47:32 UTC", "discovered_at": "2026-10-07T02:47:32.000Z" }, { "id": 153874, "urlhaus_id": "3944039", "url": "http://91.190.84.93:58846/i", "host": "91.190.84.93", "host_ip": "91.190.84.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 02:47:31 UTC", "discovered_at": "2026-10-07T02:47:31.000Z" }, { "id": 153873, "urlhaus_id": "3944040", "url": "http://60.23.238.68:48081/bin.sh", "host": "60.23.238.68", "host_ip": "60.23.238.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 02:47:31 UTC", "discovered_at": "2026-10-07T02:47:31.000Z" }, { "id": 153875, "urlhaus_id": "3944038", "url": "http://103.68.95.197:55385/bin.sh", "host": "103.68.95.197", "host_ip": "103.68.95.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 02:40:31 UTC", "discovered_at": "2026-10-07T02:40:31.000Z" }, { "id": 153876, "urlhaus_id": "3944037", "url": "http://42.234.233.75:40282/bin.sh", "host": "42.234.233.75", "host_ip": "42.234.233.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 02:33:29 UTC", "discovered_at": "2026-10-07T02:33:29.000Z" }, { "id": 153877, "urlhaus_id": "3944036", "url": "http://27.44.145.183:32947/bin.sh", "host": "27.44.145.183", "host_ip": "27.44.145.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 02:32:37 UTC", "discovered_at": "2026-10-07T02:32:37.000Z" }, { "id": 153881, "urlhaus_id": "3944032", "url": "http://91.190.84.93:58846/bin.sh", "host": "91.190.84.93", "host_ip": "91.190.84.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 02:17:45 UTC", "discovered_at": "2026-10-07T02:17:45.000Z" }, { "id": 153880, "urlhaus_id": "3944033", "url": "http://182.126.177.210:60965/bin.sh", "host": "182.126.177.210", "host_ip": "182.126.177.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 02:17:45 UTC", "discovered_at": "2026-10-07T02:17:45.000Z" }, { "id": 153879, "urlhaus_id": "3944034", "url": "http://115.55.223.110:54371/bin.sh", "host": "115.55.223.110", "host_ip": "115.55.223.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 02:17:45 UTC", "discovered_at": "2026-10-07T02:17:45.000Z" }, { "id": 153878, "urlhaus_id": "3944035", "url": "http://39.79.138.192:39415/i", "host": "39.79.138.192", "host_ip": "39.79.138.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 02:17:45 UTC", "discovered_at": "2026-10-07T02:17:45.000Z" }, { "id": 153882, "urlhaus_id": "3944031", "url": "http://170.84.133.234:32955/bin.sh", "host": "170.84.133.234", "host_ip": "170.84.133.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 02:07:37 UTC", "discovered_at": "2026-10-07T02:07:37.000Z" }, { "id": 153883, "urlhaus_id": "3944030", "url": "http://165.98.243.83:55771/i", "host": "165.98.243.83", "host_ip": "165.98.243.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 02:02:31 UTC", "discovered_at": "2026-10-07T02:02:31.000Z" }, { "id": 153885, "urlhaus_id": "3944028", "url": "http://115.50.235.154:51244/i", "host": "115.50.235.154", "host_ip": "115.50.235.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 02:02:30 UTC", "discovered_at": "2026-10-07T02:02:30.000Z" }, { "id": 153884, "urlhaus_id": "3944029", "url": "http://123.148.143.61:43201/bin.sh", "host": "123.148.143.61", "host_ip": "123.148.143.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 02:02:30 UTC", "discovered_at": "2026-10-07T02:02:30.000Z" }, { "id": 153886, "urlhaus_id": "3944027", "url": "http://120.28.200.110:52543/i", "host": "120.28.200.110", "host_ip": "120.28.200.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 01:47:27 UTC", "discovered_at": "2026-10-07T01:47:27.000Z" }, { "id": 153887, "urlhaus_id": "3944026", "url": "http://221.15.185.65:52869/i", "host": "221.15.185.65", "host_ip": "221.15.185.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 01:46:27 UTC", "discovered_at": "2026-10-07T01:46:27.000Z" }, { "id": 153888, "urlhaus_id": "3944025", "url": "http://182.121.47.144:60757/i", "host": "182.121.47.144", "host_ip": "182.121.47.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:46:26 UTC", "discovered_at": "2026-10-07T01:46:26.000Z" }, { "id": 153889, "urlhaus_id": "3944024", "url": "http://210.208.111.26:44817/i", "host": "210.208.111.26", "host_ip": "210.208.111.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 01:45:39 UTC", "discovered_at": "2026-10-07T01:45:39.000Z" }, { "id": 153890, "urlhaus_id": "3944023", "url": "http://123.10.70.76:36801/i", "host": "123.10.70.76", "host_ip": "123.10.70.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 01:32:36 UTC", "discovered_at": "2026-10-07T01:32:36.000Z" }, { "id": 153894, "urlhaus_id": "3944019", "url": "http://27.217.57.46:50836/i", "host": "27.217.57.46", "host_ip": "27.217.57.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:32:35 UTC", "discovered_at": "2026-10-07T01:32:35.000Z" }, { "id": 153893, "urlhaus_id": "3944020", "url": "http://115.50.221.110:42445/bin.sh", "host": "115.50.221.110", "host_ip": "115.50.221.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:32:35 UTC", "discovered_at": "2026-10-07T01:32:35.000Z" }, { "id": 153892, "urlhaus_id": "3944021", "url": "http://123.14.55.235:38277/i", "host": "123.14.55.235", "host_ip": "123.14.55.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 01:32:35 UTC", "discovered_at": "2026-10-07T01:32:35.000Z" }, { "id": 153891, "urlhaus_id": "3944022", "url": "http://27.210.7.195:44939/i", "host": "27.210.7.195", "host_ip": "27.210.7.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:32:35 UTC", "discovered_at": "2026-10-07T01:32:35.000Z" }, { "id": 153895, "urlhaus_id": "3944018", "url": "http://210.208.111.26:44817/bin.sh", "host": "210.208.111.26", "host_ip": "210.208.111.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 01:29:31 UTC", "discovered_at": "2026-10-07T01:29:31.000Z" }, { "id": 153896, "urlhaus_id": "3944017", "url": "http://222.142.247.47:41616/i", "host": "222.142.247.47", "host_ip": "222.142.247.47", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 01:20:33 UTC", "discovered_at": "2026-10-07T01:20:33.000Z" }, { "id": 153897, "urlhaus_id": "3944016", "url": "http://78.187.230.204:49198/i", "host": "78.187.230.204", "host_ip": "78.187.230.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:17:35 UTC", "discovered_at": "2026-10-07T01:17:35.000Z" }, { "id": 153899, "urlhaus_id": "3944014", "url": "http://125.161.1.232:58379/bin.sh", "host": "125.161.1.232", "host_ip": "125.161.1.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 01:17:31 UTC", "discovered_at": "2026-10-07T01:17:31.000Z" }, { "id": 153898, "urlhaus_id": "3944015", "url": "http://59.96.139.237:48296/i", "host": "59.96.139.237", "host_ip": "59.96.139.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:17:31 UTC", "discovered_at": "2026-10-07T01:17:31.000Z" }, { "id": 153901, "urlhaus_id": "3944012", "url": "http://108.170.136.155:50255/i", "host": "108.170.136.155", "host_ip": "108.170.136.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 01:17:29 UTC", "discovered_at": "2026-10-07T01:17:29.000Z" }, { "id": 153900, "urlhaus_id": "3944013", "url": "http://182.121.47.144:60757/bin.sh", "host": "182.121.47.144", "host_ip": "182.121.47.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:17:29 UTC", "discovered_at": "2026-10-07T01:17:29.000Z" }, { "id": 153902, "urlhaus_id": "3944011", "url": "http://196.189.198.173:37807/i", "host": "196.189.198.173", "host_ip": "196.189.198.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 01:15:36 UTC", "discovered_at": "2026-10-07T01:15:36.000Z" }, { "id": 153903, "urlhaus_id": "3944010", "url": "http://175.147.200.123:48168/i", "host": "175.147.200.123", "host_ip": "175.147.200.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 01:03:32 UTC", "discovered_at": "2026-10-07T01:03:32.000Z" }, { "id": 153907, "urlhaus_id": "3944006", "url": "http://27.217.57.46:50836/bin.sh", "host": "27.217.57.46", "host_ip": "27.217.57.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:02:36 UTC", "discovered_at": "2026-10-07T01:02:36.000Z" }, { "id": 153906, "urlhaus_id": "3944007", "url": "http://175.147.94.199:51805/i", "host": "175.147.94.199", "host_ip": "175.147.94.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 01:02:36 UTC", "discovered_at": "2026-10-07T01:02:36.000Z" }, { "id": 153905, "urlhaus_id": "3944008", "url": "http://123.14.55.235:38277/bin.sh", "host": "123.14.55.235", "host_ip": "123.14.55.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 01:02:36 UTC", "discovered_at": "2026-10-07T01:02:36.000Z" }, { "id": 153904, "urlhaus_id": "3944009", "url": "http://125.106.111.244:56709/i", "host": "125.106.111.244", "host_ip": "125.106.111.244", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 01:02:36 UTC", "discovered_at": "2026-10-07T01:02:36.000Z" }, { "id": 153909, "urlhaus_id": "3944004", "url": "http://182.114.34.109:51716/bin.sh", "host": "182.114.34.109", "host_ip": "182.114.34.109", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 01:02:35 UTC", "discovered_at": "2026-10-07T01:02:35.000Z" }, { "id": 153908, "urlhaus_id": "3944005", "url": "http://164.163.26.124:35610/i", "host": "164.163.26.124", "host_ip": "164.163.26.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 01:02:35 UTC", "discovered_at": "2026-10-07T01:02:35.000Z" }, { "id": 153910, "urlhaus_id": "3944003", "url": "http://222.142.247.47:41616/bin.sh", "host": "222.142.247.47", "host_ip": "222.142.247.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-07 00:55:28 UTC", "discovered_at": "2026-10-07T00:55:28.000Z" }, { "id": 153912, "urlhaus_id": "3944001", "url": "http://196.189.198.173:37807/bin.sh", "host": "196.189.198.173", "host_ip": "196.189.198.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 00:47:27 UTC", "discovered_at": "2026-10-07T00:47:27.000Z" }, { "id": 153911, "urlhaus_id": "3944002", "url": "http://182.126.126.199:39682/bin.sh", "host": "182.126.126.199", "host_ip": "182.126.126.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 00:47:27 UTC", "discovered_at": "2026-10-07T00:47:27.000Z" }, { "id": 153913, "urlhaus_id": "3944000", "url": "http://175.148.159.44:55227/bin.sh", "host": "175.148.159.44", "host_ip": "175.148.159.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 00:32:36 UTC", "discovered_at": "2026-10-07T00:32:36.000Z" }, { "id": 153915, "urlhaus_id": "3943998", "url": "http://123.13.85.107:44397/i", "host": "123.13.85.107", "host_ip": "123.13.85.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 00:32:35 UTC", "discovered_at": "2026-10-07T00:32:35.000Z" }, { "id": 153914, "urlhaus_id": "3943999", "url": "http://105.184.177.149:33409/i", "host": "105.184.177.149", "host_ip": "105.184.177.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 00:32:35 UTC", "discovered_at": "2026-10-07T00:32:35.000Z" }, { "id": 153916, "urlhaus_id": "3943997", "url": "http://42.239.254.29:45947/i", "host": "42.239.254.29", "host_ip": "42.239.254.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 00:32:34 UTC", "discovered_at": "2026-10-07T00:32:34.000Z" }, { "id": 153917, "urlhaus_id": "3943996", "url": "http://179.49.213.85:32815/bin.sh", "host": "179.49.213.85", "host_ip": "179.49.213.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-07 00:19:38 UTC", "discovered_at": "2026-10-07T00:19:38.000Z" }, { "id": 153919, "urlhaus_id": "3943994", "url": "http://210.57.226.6:3125/i", "host": "210.57.226.6", "host_ip": "210.57.226.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 00:17:33 UTC", "discovered_at": "2026-10-07T00:17:33.000Z" }, { "id": 153918, "urlhaus_id": "3943995", "url": "http://42.239.254.29:45947/bin.sh", "host": "42.239.254.29", "host_ip": "42.239.254.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 00:17:33 UTC", "discovered_at": "2026-10-07T00:17:33.000Z" }, { "id": 153920, "urlhaus_id": "3943993", "url": "http://45.148.148.31:51458/i", "host": "45.148.148.31", "host_ip": "45.148.148.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-07 00:06:35 UTC", "discovered_at": "2026-10-07T00:06:35.000Z" }, { "id": 153921, "urlhaus_id": "3943992", "url": "http://60.16.135.182:50504/i", "host": "60.16.135.182", "host_ip": "60.16.135.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 00:02:37 UTC", "discovered_at": "2026-10-07T00:02:37.000Z" }, { "id": 153926, "urlhaus_id": "3943987", "url": "http://123.129.56.38:56147/i", "host": "123.129.56.38", "host_ip": "123.129.56.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 00:02:36 UTC", "discovered_at": "2026-10-07T00:02:36.000Z" }, { "id": 153925, "urlhaus_id": "3943988", "url": "http://222.141.122.53:40331/bin.sh", "host": "222.141.122.53", "host_ip": "222.141.122.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 00:02:36 UTC", "discovered_at": "2026-10-07T00:02:36.000Z" }, { "id": 153924, "urlhaus_id": "3943989", "url": "http://113.231.230.20:55664/bin.sh", "host": "113.231.230.20", "host_ip": "113.231.230.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-07 00:02:36 UTC", "discovered_at": "2026-10-07T00:02:36.000Z" }, { "id": 153923, "urlhaus_id": "3943990", "url": "http://114.239.56.148:48082/i", "host": "114.239.56.148", "host_ip": "114.239.56.148", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 00:02:36 UTC", "discovered_at": "2026-10-07T00:02:36.000Z" }, { "id": 153922, "urlhaus_id": "3943991", "url": "http://178.34.124.22:39488/i", "host": "178.34.124.22", "host_ip": "178.34.124.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 00:02:36 UTC", "discovered_at": "2026-10-07T00:02:36.000Z" }, { "id": 153928, "urlhaus_id": "3943985", "url": "http://123.5.169.0:44704/i", "host": "123.5.169.0", "host_ip": "123.5.169.0", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-07 00:02:35 UTC", "discovered_at": "2026-10-07T00:02:35.000Z" }, { "id": 153927, "urlhaus_id": "3943986", "url": "http://179.49.213.85:32815/i", "host": "179.49.213.85", "host_ip": "179.49.213.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-07 00:02:35 UTC", "discovered_at": "2026-10-07T00:02:35.000Z" }, { "id": 153929, "urlhaus_id": "3943984", "url": "http://115.59.88.197:58691/i", "host": "115.59.88.197", "host_ip": "115.59.88.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 23:56:30 UTC", "discovered_at": "2026-10-06T23:56:30.000Z" }, { "id": 153931, "urlhaus_id": "3943982", "url": "http://42.232.235.138:39170/i", "host": "42.232.235.138", "host_ip": "42.232.235.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 23:47:28 UTC", "discovered_at": "2026-10-06T23:47:28.000Z" }, { "id": 153930, "urlhaus_id": "3943983", "url": "http://187.62.243.142:58551/i", "host": "187.62.243.142", "host_ip": "187.62.243.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:47:28 UTC", "discovered_at": "2026-10-06T23:47:28.000Z" }, { "id": 153934, "urlhaus_id": "3943979", "url": "http://78.188.196.206:40890/bin.sh", "host": "78.188.196.206", "host_ip": "78.188.196.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 23:47:27 UTC", "discovered_at": "2026-10-06T23:47:27.000Z" }, { "id": 153933, "urlhaus_id": "3943980", "url": "http://78.188.196.206:40890/i", "host": "78.188.196.206", "host_ip": "78.188.196.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 23:47:27 UTC", "discovered_at": "2026-10-06T23:47:27.000Z" }, { "id": 153932, "urlhaus_id": "3943981", "url": "http://123.5.169.0:44704/bin.sh", "host": "123.5.169.0", "host_ip": "123.5.169.0", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 23:47:27 UTC", "discovered_at": "2026-10-06T23:47:27.000Z" }, { "id": 153935, "urlhaus_id": "3943978", "url": "http://112.225.105.182:38520/bin.sh", "host": "112.225.105.182", "host_ip": "112.225.105.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 23:43:36 UTC", "discovered_at": "2026-10-06T23:43:36.000Z" }, { "id": 153936, "urlhaus_id": "3943977", "url": "http://42.234.163.19:43965/i", "host": "42.234.163.19", "host_ip": "42.234.163.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 23:42:43 UTC", "discovered_at": "2026-10-06T23:42:43.000Z" }, { "id": 153937, "urlhaus_id": "3943976", "url": "http://185.89.156.101:35112/i", "host": "185.89.156.101", "host_ip": "185.89.156.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:33:29 UTC", "discovered_at": "2026-10-06T23:33:29.000Z" }, { "id": 153939, "urlhaus_id": "3943974", "url": "http://115.51.88.191:59352/i", "host": "115.51.88.191", "host_ip": "115.51.88.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:32:49 UTC", "discovered_at": "2026-10-06T23:32:49.000Z" }, { "id": 153938, "urlhaus_id": "3943975", "url": "http://123.129.56.38:56147/bin.sh", "host": "123.129.56.38", "host_ip": "123.129.56.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 23:32:49 UTC", "discovered_at": "2026-10-06T23:32:49.000Z" }, { "id": 153942, "urlhaus_id": "3943971", "url": "http://92.42.134.80:38229/i", "host": "92.42.134.80", "host_ip": "92.42.134.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 23:32:48 UTC", "discovered_at": "2026-10-06T23:32:48.000Z" }, { "id": 153941, "urlhaus_id": "3943972", "url": "http://105.225.13.115:42157/i", "host": "105.225.13.115", "host_ip": "105.225.13.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:32:48 UTC", "discovered_at": "2026-10-06T23:32:48.000Z" }, { "id": 153940, "urlhaus_id": "3943973", "url": "http://59.96.139.69:42178/i", "host": "59.96.139.69", "host_ip": "59.96.139.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 23:32:48 UTC", "discovered_at": "2026-10-06T23:32:48.000Z" }, { "id": 153944, "urlhaus_id": "3943969", "url": "http://119.179.30.73:43717/i", "host": "119.179.30.73", "host_ip": "119.179.30.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:32:47 UTC", "discovered_at": "2026-10-06T23:32:47.000Z" }, { "id": 153943, "urlhaus_id": "3943970", "url": "http://115.51.139.132:50321/bin.sh", "host": "115.51.139.132", "host_ip": "115.51.139.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:32:47 UTC", "discovered_at": "2026-10-06T23:32:47.000Z" }, { "id": 153945, "urlhaus_id": "3943968", "url": "http://42.234.163.19:43965/bin.sh", "host": "42.234.163.19", "host_ip": "42.234.163.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 23:19:37 UTC", "discovered_at": "2026-10-06T23:19:37.000Z" }, { "id": 153946, "urlhaus_id": "3943967", "url": "http://222.127.170.183:45331/i", "host": "222.127.170.183", "host_ip": "222.127.170.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:17:28 UTC", "discovered_at": "2026-10-06T23:17:28.000Z" }, { "id": 153948, "urlhaus_id": "3943965", "url": "http://117.131.92.150:54561/i", "host": "117.131.92.150", "host_ip": "117.131.92.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:17:26 UTC", "discovered_at": "2026-10-06T23:17:26.000Z" }, { "id": 153947, "urlhaus_id": "3943966", "url": "http://120.28.167.203:50009/i", "host": "120.28.167.203", "host_ip": "120.28.167.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:17:26 UTC", "discovered_at": "2026-10-06T23:17:26.000Z" }, { "id": 153949, "urlhaus_id": "3943964", "url": "http://182.121.16.69:49873/bin.sh", "host": "182.121.16.69", "host_ip": "182.121.16.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 23:14:28 UTC", "discovered_at": "2026-10-06T23:14:28.000Z" }, { "id": 153950, "urlhaus_id": "3943963", "url": "http://103.111.23.13:59651/i", "host": "103.111.23.13", "host_ip": "103.111.23.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:03:33 UTC", "discovered_at": "2026-10-06T23:03:33.000Z" }, { "id": 153952, "urlhaus_id": "3943961", "url": "http://119.179.254.148:40760/i", "host": "119.179.254.148", "host_ip": "119.179.254.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 23:02:28 UTC", "discovered_at": "2026-10-06T23:02:28.000Z" }, { "id": 153951, "urlhaus_id": "3943962", "url": "http://120.28.167.203:50009/bin.sh", "host": "120.28.167.203", "host_ip": "120.28.167.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 23:02:28 UTC", "discovered_at": "2026-10-06T23:02:28.000Z" }, { "id": 153953, "urlhaus_id": "3943960", "url": "http://196.189.35.226:40424/bin.sh", "host": "196.189.35.226", "host_ip": "196.189.35.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 22:47:36 UTC", "discovered_at": "2026-10-06T22:47:36.000Z" }, { "id": 153954, "urlhaus_id": "3943959", "url": "http://117.131.92.150:54561/bin.sh", "host": "117.131.92.150", "host_ip": "117.131.92.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 22:47:27 UTC", "discovered_at": "2026-10-06T22:47:27.000Z" }, { "id": 153955, "urlhaus_id": "3943958", "url": "http://117.253.155.54:60752/i", "host": "117.253.155.54", "host_ip": "117.253.155.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 22:47:26 UTC", "discovered_at": "2026-10-06T22:47:26.000Z" }, { "id": 153956, "urlhaus_id": "3943957", "url": "http://119.179.254.148:40760/bin.sh", "host": "119.179.254.148", "host_ip": "119.179.254.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 22:32:46 UTC", "discovered_at": "2026-10-06T22:32:46.000Z" }, { "id": 153957, "urlhaus_id": "3943956", "url": "http://196.189.35.172:37629/i", "host": "196.189.35.172", "host_ip": "196.189.35.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 22:32:45 UTC", "discovered_at": "2026-10-06T22:32:45.000Z" }, { "id": 153958, "urlhaus_id": "3943955", "url": "http://113.229.80.225:57356/i", "host": "113.229.80.225", "host_ip": "113.229.80.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 22:32:34 UTC", "discovered_at": "2026-10-06T22:32:34.000Z" }, { "id": 153959, "urlhaus_id": "3943954", "url": "http://196.191.233.24:43597/i", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 22:17:47 UTC", "discovered_at": "2026-10-06T22:17:47.000Z" }, { "id": 153961, "urlhaus_id": "3943952", "url": "http://222.127.170.183:45331/bin.sh", "host": "222.127.170.183", "host_ip": "222.127.170.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 22:17:37 UTC", "discovered_at": "2026-10-06T22:17:37.000Z" }, { "id": 153960, "urlhaus_id": "3943953", "url": "http://196.189.35.226:40424/i", "host": "196.189.35.226", "host_ip": "196.189.35.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 22:17:37 UTC", "discovered_at": "2026-10-06T22:17:37.000Z" }, { "id": 153962, "urlhaus_id": "3943951", "url": "http://112.248.29.124:35682/bin.sh", "host": "112.248.29.124", "host_ip": "112.248.29.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 22:03:34 UTC", "discovered_at": "2026-10-06T22:03:34.000Z" }, { "id": 153963, "urlhaus_id": "3943950", "url": "http://222.136.231.249:32917/i", "host": "222.136.231.249", "host_ip": "222.136.231.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 22:02:30 UTC", "discovered_at": "2026-10-06T22:02:30.000Z" }, { "id": 153964, "urlhaus_id": "3943949", "url": "http://113.229.80.225:57356/bin.sh", "host": "113.229.80.225", "host_ip": "113.229.80.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 22:02:29 UTC", "discovered_at": "2026-10-06T22:02:29.000Z" }, { "id": 153965, "urlhaus_id": "3943948", "url": "http://42.224.102.171:36007/i", "host": "42.224.102.171", "host_ip": "42.224.102.171", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 21:47:27 UTC", "discovered_at": "2026-10-06T21:47:27.000Z" }, { "id": 153966, "urlhaus_id": "3943947", "url": "http://42.177.57.76:56907/i", "host": "42.177.57.76", "host_ip": "42.177.57.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 21:46:23 UTC", "discovered_at": "2026-10-06T21:46:23.000Z" }, { "id": 153967, "urlhaus_id": "3943946", "url": "http://125.41.77.54:35908/i", "host": "125.41.77.54", "host_ip": "125.41.77.54", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 21:32:25 UTC", "discovered_at": "2026-10-06T21:32:25.000Z" }, { "id": 153968, "urlhaus_id": "3943945", "url": "http://182.126.126.199:39682/i", "host": "182.126.126.199", "host_ip": "182.126.126.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 21:32:24 UTC", "discovered_at": "2026-10-06T21:32:24.000Z" }, { "id": 153972, "urlhaus_id": "3943941", "url": "http://60.176.8.34:50001/bin.sh", "host": "60.176.8.34", "host_ip": "60.176.8.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 21:17:33 UTC", "discovered_at": "2026-10-06T21:17:33.000Z" }, { "id": 153971, "urlhaus_id": "3943942", "url": "http://42.54.110.21:37833/i", "host": "42.54.110.21", "host_ip": "42.54.110.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 21:17:33 UTC", "discovered_at": "2026-10-06T21:17:33.000Z" }, { "id": 153970, "urlhaus_id": "3943943", "url": "http://120.28.215.36:37672/i", "host": "120.28.215.36", "host_ip": "120.28.215.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 21:17:33 UTC", "discovered_at": "2026-10-06T21:17:33.000Z" }, { "id": 153969, "urlhaus_id": "3943944", "url": "http://115.50.216.143:39292/i", "host": "115.50.216.143", "host_ip": "115.50.216.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 21:17:33 UTC", "discovered_at": "2026-10-06T21:17:33.000Z" }, { "id": 153973, "urlhaus_id": "3943940", "url": "http://222.137.97.203:41864/i", "host": "222.137.97.203", "host_ip": "222.137.97.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 21:17:32 UTC", "discovered_at": "2026-10-06T21:17:32.000Z" }, { "id": 153974, "urlhaus_id": "3943939", "url": "http://124.94.246.227:41356/i", "host": "124.94.246.227", "host_ip": "124.94.246.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 21:02:24 UTC", "discovered_at": "2026-10-06T21:02:24.000Z" }, { "id": 153975, "urlhaus_id": "3943938", "url": "http://182.120.3.227:55565/i", "host": "182.120.3.227", "host_ip": "182.120.3.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 20:52:31 UTC", "discovered_at": "2026-10-06T20:52:31.000Z" }, { "id": 153976, "urlhaus_id": "3943937", "url": "http://200.115.102.16:53505/i", "host": "200.115.102.16", "host_ip": "200.115.102.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 20:48:22 UTC", "discovered_at": "2026-10-06T20:48:22.000Z" }, { "id": 153977, "urlhaus_id": "3943936", "url": "http://124.94.246.227:41356/bin.sh", "host": "124.94.246.227", "host_ip": "124.94.246.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 20:47:26 UTC", "discovered_at": "2026-10-06T20:47:26.000Z" }, { "id": 153978, "urlhaus_id": "3943935", "url": "http://222.137.97.203:41864/bin.sh", "host": "222.137.97.203", "host_ip": "222.137.97.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 20:47:25 UTC", "discovered_at": "2026-10-06T20:47:25.000Z" }, { "id": 153979, "urlhaus_id": "3943934", "url": "http://115.54.108.137:38442/bin.sh", "host": "115.54.108.137", "host_ip": "115.54.108.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 20:33:29 UTC", "discovered_at": "2026-10-06T20:33:29.000Z" }, { "id": 153982, "urlhaus_id": "3943931", "url": "http://39.90.144.60:37749/i", "host": "39.90.144.60", "host_ip": "39.90.144.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 20:32:24 UTC", "discovered_at": "2026-10-06T20:32:24.000Z" }, { "id": 153981, "urlhaus_id": "3943932", "url": "http://113.231.232.203:33385/bin.sh", "host": "113.231.232.203", "host_ip": "113.231.232.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 20:32:24 UTC", "discovered_at": "2026-10-06T20:32:24.000Z" }, { "id": 153980, "urlhaus_id": "3943933", "url": "http://200.115.102.16:53505/bin.sh", "host": "200.115.102.16", "host_ip": "200.115.102.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 20:32:24 UTC", "discovered_at": "2026-10-06T20:32:24.000Z" }, { "id": 153983, "urlhaus_id": "3943930", "url": "http://45.183.184.74:49148/bin.sh", "host": "45.183.184.74", "host_ip": "45.183.184.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 20:20:29 UTC", "discovered_at": "2026-10-06T20:20:29.000Z" }, { "id": 153984, "urlhaus_id": "3943929", "url": "http://39.90.144.60:37749/bin.sh", "host": "39.90.144.60", "host_ip": "39.90.144.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 20:16:25 UTC", "discovered_at": "2026-10-06T20:16:25.000Z" }, { "id": 153986, "urlhaus_id": "3943927", "url": "http://120.28.194.160:57302/i", "host": "120.28.194.160", "host_ip": "120.28.194.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 20:02:24 UTC", "discovered_at": "2026-10-06T20:02:24.000Z" }, { "id": 153985, "urlhaus_id": "3943928", "url": "http://60.23.238.248:47046/i", "host": "60.23.238.248", "host_ip": "60.23.238.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 20:02:24 UTC", "discovered_at": "2026-10-06T20:02:24.000Z" }, { "id": 153987, "urlhaus_id": "3943926", "url": "http://42.237.110.126:60869/i", "host": "42.237.110.126", "host_ip": "42.237.110.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips", "last_online": null, "first_seen": "2026-10-06 19:48:19 UTC", "discovered_at": "2026-10-06T19:48:19.000Z" }, { "id": 153988, "urlhaus_id": "3943925", "url": "http://182.121.16.69:49873/i", "host": "182.121.16.69", "host_ip": "182.121.16.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 19:47:30 UTC", "discovered_at": "2026-10-06T19:47:30.000Z" }, { "id": 153991, "urlhaus_id": "3943922", "url": "http://123.13.0.143:40405/bin.sh", "host": "123.13.0.143", "host_ip": "123.13.0.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 19:47:24 UTC", "discovered_at": "2026-10-06T19:47:24.000Z" }, { "id": 153990, "urlhaus_id": "3943923", "url": "http://113.231.232.203:33385/i", "host": "113.231.232.203", "host_ip": "113.231.232.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 19:47:24 UTC", "discovered_at": "2026-10-06T19:47:24.000Z" }, { "id": 153989, "urlhaus_id": "3943924", "url": "http://222.141.122.53:40331/i", "host": "222.141.122.53", "host_ip": "222.141.122.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 19:47:24 UTC", "discovered_at": "2026-10-06T19:47:24.000Z" }, { "id": 153992, "urlhaus_id": "3943921", "url": "http://59.180.162.153:42206/i", "host": "59.180.162.153", "host_ip": "59.180.162.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 19:32:52 UTC", "discovered_at": "2026-10-06T19:32:52.000Z" }, { "id": 153993, "urlhaus_id": "3943920", "url": "http://115.55.223.110:54371/i", "host": "115.55.223.110", "host_ip": "115.55.223.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 19:32:42 UTC", "discovered_at": "2026-10-06T19:32:42.000Z" }, { "id": 153996, "urlhaus_id": "3943917", "url": "http://182.113.200.36:41521/i", "host": "182.113.200.36", "host_ip": "182.113.200.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 19:32:37 UTC", "discovered_at": "2026-10-06T19:32:37.000Z" }, { "id": 153995, "urlhaus_id": "3943918", "url": "http://27.215.181.136:32832/i", "host": "27.215.181.136", "host_ip": "27.215.181.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 19:32:37 UTC", "discovered_at": "2026-10-06T19:32:37.000Z" }, { "id": 153994, "urlhaus_id": "3943919", "url": "http://115.54.233.226:34621/i", "host": "115.54.233.226", "host_ip": "115.54.233.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 19:32:37 UTC", "discovered_at": "2026-10-06T19:32:37.000Z" }, { "id": 153997, "urlhaus_id": "3943916", "url": "http://182.121.139.213:59961/i", "host": "182.121.139.213", "host_ip": "182.121.139.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 19:17:28 UTC", "discovered_at": "2026-10-06T19:17:28.000Z" }, { "id": 153998, "urlhaus_id": "3943915", "url": "http://124.6.167.121:55503/i", "host": "124.6.167.121", "host_ip": "124.6.167.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 19:17:25 UTC", "discovered_at": "2026-10-06T19:17:25.000Z" }, { "id": 153999, "urlhaus_id": "3943914", "url": "http://42.224.151.147:43912/i", "host": "42.224.151.147", "host_ip": "42.224.151.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 19:17:24 UTC", "discovered_at": "2026-10-06T19:17:24.000Z" }, { "id": 154000, "urlhaus_id": "3943913", "url": "http://221.200.211.78:48659/bin.sh", "host": "221.200.211.78", "host_ip": "221.200.211.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 19:03:18 UTC", "discovered_at": "2026-10-06T19:03:18.000Z" }, { "id": 154001, "urlhaus_id": "3943912", "url": "http://196.191.231.12:51800/i", "host": "196.191.231.12", "host_ip": "196.191.231.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 19:02:39 UTC", "discovered_at": "2026-10-06T19:02:39.000Z" }, { "id": 154003, "urlhaus_id": "3943910", "url": "http://42.224.151.147:43912/bin.sh", "host": "42.224.151.147", "host_ip": "42.224.151.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 19:02:28 UTC", "discovered_at": "2026-10-06T19:02:28.000Z" }, { "id": 154002, "urlhaus_id": "3943911", "url": "http://116.149.147.99:47363/i", "host": "116.149.147.99", "host_ip": "116.149.147.99", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 19:02:28 UTC", "discovered_at": "2026-10-06T19:02:28.000Z" }, { "id": 154004, "urlhaus_id": "3943909", "url": "http://113.237.229.123:58872/i", "host": "113.237.229.123", "host_ip": "113.237.229.123", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 19:02:27 UTC", "discovered_at": "2026-10-06T19:02:27.000Z" }, { "id": 154005, "urlhaus_id": "3943908", "url": "http://123.7.222.8:60243/bin.sh", "host": "123.7.222.8", "host_ip": "123.7.222.8", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 19:02:26 UTC", "discovered_at": "2026-10-06T19:02:26.000Z" }, { "id": 152465, "urlhaus_id": "3943907", "url": "http://27.215.182.212:42285/i", "host": "27.215.182.212", "host_ip": "27.215.182.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 18:57:27 UTC", "discovered_at": "2026-10-06T18:57:27.000Z" }, { "id": 152466, "urlhaus_id": "3943906", "url": "http://83.228.109.209:57061/i", "host": "83.228.109.209", "host_ip": "83.228.109.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 18:48:07 UTC", "discovered_at": "2026-10-06T18:48:07.000Z" }, { "id": 152472, "urlhaus_id": "3943900", "url": "http://59.96.142.159:58265/i", "host": "59.96.142.159", "host_ip": "59.96.142.159", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:47:35 UTC", "discovered_at": "2026-10-06T18:47:35.000Z" }, { "id": 152471, "urlhaus_id": "3943901", "url": "http://116.138.107.166:54353/i", "host": "116.138.107.166", "host_ip": "116.138.107.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 18:47:35 UTC", "discovered_at": "2026-10-06T18:47:35.000Z" }, { "id": 152470, "urlhaus_id": "3943902", "url": "http://42.230.131.69:45539/i", "host": "42.230.131.69", "host_ip": "42.230.131.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:47:35 UTC", "discovered_at": "2026-10-06T18:47:35.000Z" }, { "id": 152469, "urlhaus_id": "3943903", "url": "http://42.230.131.69:45539/bin.sh", "host": "42.230.131.69", "host_ip": "42.230.131.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:47:35 UTC", "discovered_at": "2026-10-06T18:47:35.000Z" }, { "id": 152468, "urlhaus_id": "3943904", "url": "http://116.138.191.211:33915/i", "host": "116.138.191.211", "host_ip": "116.138.191.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 18:47:35 UTC", "discovered_at": "2026-10-06T18:47:35.000Z" }, { "id": 152467, "urlhaus_id": "3943905", "url": "http://115.51.98.26:36333/i", "host": "115.51.98.26", "host_ip": "115.51.98.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:47:35 UTC", "discovered_at": "2026-10-06T18:47:35.000Z" }, { "id": 152473, "urlhaus_id": "3943899", "url": "http://61.137.150.107:59822/i", "host": "61.137.150.107", "host_ip": "61.137.150.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 18:33:25 UTC", "discovered_at": "2026-10-06T18:33:25.000Z" }, { "id": 152474, "urlhaus_id": "3943898", "url": "http://125.45.17.175:33893/i", "host": "125.45.17.175", "host_ip": "125.45.17.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:32:26 UTC", "discovered_at": "2026-10-06T18:32:26.000Z" }, { "id": 152475, "urlhaus_id": "3943897", "url": "http://116.138.107.166:54353/bin.sh", "host": "116.138.107.166", "host_ip": "116.138.107.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 18:32:24 UTC", "discovered_at": "2026-10-06T18:32:24.000Z" }, { "id": 152477, "urlhaus_id": "3943895", "url": "http://182.112.31.192:54978/bin.sh", "host": "182.112.31.192", "host_ip": "182.112.31.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:17:30 UTC", "discovered_at": "2026-10-06T18:17:30.000Z" }, { "id": 152476, "urlhaus_id": "3943896", "url": "http://66.58.168.70:45090/i", "host": "66.58.168.70", "host_ip": "66.58.168.70", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 18:17:30 UTC", "discovered_at": "2026-10-06T18:17:30.000Z" }, { "id": 152479, "urlhaus_id": "3943893", "url": "http://105.225.6.143:58051/i", "host": "105.225.6.143", "host_ip": "105.225.6.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 18:02:26 UTC", "discovered_at": "2026-10-06T18:02:26.000Z" }, { "id": 152478, "urlhaus_id": "3943894", "url": "http://115.96.229.130:52684/bin.sh", "host": "115.96.229.130", "host_ip": "115.96.229.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:02:26 UTC", "discovered_at": "2026-10-06T18:02:26.000Z" }, { "id": 152482, "urlhaus_id": "3943890", "url": "http://115.48.142.169:56163/i", "host": "115.48.142.169", "host_ip": "115.48.142.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 18:02:25 UTC", "discovered_at": "2026-10-06T18:02:25.000Z" }, { "id": 152481, "urlhaus_id": "3943891", "url": "http://222.246.12.105:60522/i", "host": "222.246.12.105", "host_ip": "222.246.12.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 18:02:25 UTC", "discovered_at": "2026-10-06T18:02:25.000Z" }, { "id": 152480, "urlhaus_id": "3943892", "url": "http://61.137.150.107:59822/bin.sh", "host": "61.137.150.107", "host_ip": "61.137.150.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 18:02:25 UTC", "discovered_at": "2026-10-06T18:02:25.000Z" }, { "id": 152483, "urlhaus_id": "3943889", "url": "http://222.246.12.105:60522/bin.sh", "host": "222.246.12.105", "host_ip": "222.246.12.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 17:47:25 UTC", "discovered_at": "2026-10-06T17:47:25.000Z" }, { "id": 152486, "urlhaus_id": "3943886", "url": "http://27.222.45.79:37024/bin.sh", "host": "27.222.45.79", "host_ip": "27.222.45.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 17:47:24 UTC", "discovered_at": "2026-10-06T17:47:24.000Z" }, { "id": 152485, "urlhaus_id": "3943887", "url": "http://222.141.21.208:48488/i", "host": "222.141.21.208", "host_ip": "222.141.21.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 17:47:24 UTC", "discovered_at": "2026-10-06T17:47:24.000Z" }, { "id": 152484, "urlhaus_id": "3943888", "url": "http://27.37.226.182:43711/i", "host": "27.37.226.182", "host_ip": "27.37.226.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 17:47:24 UTC", "discovered_at": "2026-10-06T17:47:24.000Z" }, { "id": 152487, "urlhaus_id": "3943885", "url": "http://84.51.204.125:33862/i", "host": "84.51.204.125", "host_ip": "84.51.204.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 17:32:30 UTC", "discovered_at": "2026-10-06T17:32:30.000Z" }, { "id": 152488, "urlhaus_id": "3943884", "url": "http://222.140.196.83:48958/i", "host": "222.140.196.83", "host_ip": "222.140.196.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 17:32:27 UTC", "discovered_at": "2026-10-06T17:32:27.000Z" }, { "id": 152489, "urlhaus_id": "3943883", "url": "http://222.127.50.102:60961/i", "host": "222.127.50.102", "host_ip": "222.127.50.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 17:32:26 UTC", "discovered_at": "2026-10-06T17:32:26.000Z" }, { "id": 152490, "urlhaus_id": "3943882", "url": "http://113.221.72.254:48039/i", "host": "113.221.72.254", "host_ip": "113.221.72.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 17:01:26 UTC", "discovered_at": "2026-10-06T17:01:26.000Z" }, { "id": 152491, "urlhaus_id": "3943881", "url": "http://222.127.50.102:60961/bin.sh", "host": "222.127.50.102", "host_ip": "222.127.50.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 17:01:25 UTC", "discovered_at": "2026-10-06T17:01:25.000Z" }, { "id": 152495, "urlhaus_id": "3943877", "url": "http://27.222.45.79:37024/i", "host": "27.222.45.79", "host_ip": "27.222.45.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 16:47:27 UTC", "discovered_at": "2026-10-06T16:47:27.000Z" }, { "id": 152494, "urlhaus_id": "3943878", "url": "http://175.147.89.176:56869/i", "host": "175.147.89.176", "host_ip": "175.147.89.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 16:47:27 UTC", "discovered_at": "2026-10-06T16:47:27.000Z" }, { "id": 152493, "urlhaus_id": "3943879", "url": "http://115.63.12.140:44328/i", "host": "115.63.12.140", "host_ip": "115.63.12.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 16:47:27 UTC", "discovered_at": "2026-10-06T16:47:27.000Z" }, { "id": 152492, "urlhaus_id": "3943880", "url": "http://222.141.21.208:48488/bin.sh", "host": "222.141.21.208", "host_ip": "222.141.21.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 16:47:27 UTC", "discovered_at": "2026-10-06T16:47:27.000Z" }, { "id": 152496, "urlhaus_id": "3943876", "url": "http://105.184.240.215:56475/i", "host": "105.184.240.215", "host_ip": "105.184.240.215", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:33:25 UTC", "discovered_at": "2026-10-06T16:33:25.000Z" }, { "id": 152497, "urlhaus_id": "3943875", "url": "http://123.148.143.61:43201/i", "host": "123.148.143.61", "host_ip": "123.148.143.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:32:25 UTC", "discovered_at": "2026-10-06T16:32:25.000Z" }, { "id": 152498, "urlhaus_id": "3943874", "url": "http://113.221.72.254:48039/bin.sh", "host": "113.221.72.254", "host_ip": "113.221.72.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:32:24 UTC", "discovered_at": "2026-10-06T16:32:24.000Z" }, { "id": 152499, "urlhaus_id": "3943873", "url": "http://210.208.110.4:41566/bin.sh", "host": "210.208.110.4", "host_ip": "210.208.110.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 16:20:33 UTC", "discovered_at": "2026-10-06T16:20:33.000Z" }, { "id": 152501, "urlhaus_id": "3943871", "url": "https://github.com/niehgns/yo3/raw/refs/heads/main/fakepayclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-06 16:19:26 UTC", "discovered_at": "2026-10-06T16:19:26.000Z" }, { "id": 152500, "urlhaus_id": "3943872", "url": "https://github.com/niehgns/yo3/raw/refs/heads/main/kryptonclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-06 16:19:26 UTC", "discovered_at": "2026-10-06T16:19:26.000Z" }, { "id": 152506, "urlhaus_id": "3943866", "url": "https://ikovrsps.com/Ikov.jar", "host": "ikovrsps.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CoinMiner, runelite, runelure, stealer", "last_online": null, "first_seen": "2026-10-06 16:19:24 UTC", "discovered_at": "2026-10-06T16:19:24.000Z" }, { "id": 152505, "urlhaus_id": "3943867", "url": "https://github.com/niehgns/yo3/raw/refs/heads/main/xenonclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-06 16:19:24 UTC", "discovered_at": "2026-10-06T16:19:24.000Z" }, { "id": 152504, "urlhaus_id": "3943868", "url": "http://182.119.176.144:32888/bin.sh", "host": "182.119.176.144", "host_ip": "182.119.176.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 16:19:24 UTC", "discovered_at": "2026-10-06T16:19:24.000Z" }, { "id": 152503, "urlhaus_id": "3943869", "url": "https://github.com/niehgns/yo3/raw/refs/heads/main/radiumclient-clients-full.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-06 16:19:24 UTC", "discovered_at": "2026-10-06T16:19:24.000Z" }, { "id": 152502, "urlhaus_id": "3943870", "url": "https://github.com/niehgns/yo3/raw/refs/heads/main/dqrkisclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-06 16:19:24 UTC", "discovered_at": "2026-10-06T16:19:24.000Z" }, { "id": 152507, "urlhaus_id": "3943865", "url": "http://222.246.43.55:48748/bin.sh", "host": "222.246.43.55", "host_ip": "222.246.43.55", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 16:19:23 UTC", "discovered_at": "2026-10-06T16:19:23.000Z" }, { "id": 152508, "urlhaus_id": "3943864", "url": "http://221.3.87.188:42241/Mozi.m", "host": "221.3.87.188", "host_ip": "221.3.87.188", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:19:22 UTC", "discovered_at": "2026-10-06T16:19:22.000Z" }, { "id": 152509, "urlhaus_id": "3943863", "url": "http://130.12.209.132:50698/i", "host": "130.12.209.132", "host_ip": "130.12.209.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:17:23 UTC", "discovered_at": "2026-10-06T16:17:23.000Z" }, { "id": 152510, "urlhaus_id": "3943862", "url": "http://114.227.63.106:46296/bin.sh", "host": "114.227.63.106", "host_ip": "114.227.63.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:15:26 UTC", "discovered_at": "2026-10-06T16:15:26.000Z" }, { "id": 152511, "urlhaus_id": "3943861", "url": "http://94.154.43.34:8080/flutter.arm6", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:13:30 UTC", "discovered_at": "2026-10-06T16:13:30.000Z" }, { "id": 152523, "urlhaus_id": "3943849", "url": "http://94.154.43.34:8080/flutter.mips", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152522, "urlhaus_id": "3943850", "url": "http://94.154.43.34:8080/flutter.m68k", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152521, "urlhaus_id": "3943851", "url": "http://94.154.43.34:8080/flutter.x86", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152520, "urlhaus_id": "3943852", "url": "http://94.154.43.34:8080/flutter.arm7", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152519, "urlhaus_id": "3943853", "url": "http://94.154.43.34:8080/flutter.arm5", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152518, "urlhaus_id": "3943854", "url": "http://94.154.43.34:8080/flutter.arm8", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152517, "urlhaus_id": "3943855", "url": "http://94.154.43.34:8080/flutter.x86_64", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152516, "urlhaus_id": "3943856", "url": "http://94.154.43.34:8080/flutter.ppc", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152515, "urlhaus_id": "3943857", "url": "http://94.154.43.34:8080/flutter.ppc64", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152514, "urlhaus_id": "3943858", "url": "http://94.154.43.34:8080/flutter.arm", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152513, "urlhaus_id": "3943859", "url": "http://94.154.43.34:8080/flutter.mipsel", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152512, "urlhaus_id": "3943860", "url": "http://94.154.43.34:8080/flutter.debug", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:34 UTC", "discovered_at": "2026-10-06T16:12:34.000Z" }, { "id": 152524, "urlhaus_id": "3943848", "url": "http://94.154.43.34:8080/dl.sh", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34-8080, sh, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:12:19 UTC", "discovered_at": "2026-10-06T16:12:19.000Z" }, { "id": 152525, "urlhaus_id": "3943847", "url": "http://176.65.139.35/hiddenbin/mpsl", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:05:23 UTC", "discovered_at": "2026-10-06T16:05:23.000Z" }, { "id": 152526, "urlhaus_id": "3943846", "url": "http://176.65.139.35/hiddenbin/spc", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:04:21 UTC", "discovered_at": "2026-10-06T16:04:21.000Z" }, { "id": 152531, "urlhaus_id": "3943841", "url": "http://176.65.139.155/mips64", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:45 UTC", "discovered_at": "2026-10-06T16:02:45.000Z" }, { "id": 152530, "urlhaus_id": "3943842", "url": "http://176.65.139.155/ppc64", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:45 UTC", "discovered_at": "2026-10-06T16:02:45.000Z" }, { "id": 152529, "urlhaus_id": "3943843", "url": "http://176.65.139.155/mipsel", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:45 UTC", "discovered_at": "2026-10-06T16:02:45.000Z" }, { "id": 152528, "urlhaus_id": "3943844", "url": "http://176.65.139.155/i686", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:45 UTC", "discovered_at": "2026-10-06T16:02:45.000Z" }, { "id": 152527, "urlhaus_id": "3943845", "url": "http://176.65.139.155/mips", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:45 UTC", "discovered_at": "2026-10-06T16:02:45.000Z" }, { "id": 152538, "urlhaus_id": "3943834", "url": "http://176.65.139.155/amd64", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:44 UTC", "discovered_at": "2026-10-06T16:02:44.000Z" }, { "id": 152537, "urlhaus_id": "3943835", "url": "http://176.65.139.155/arm64", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:44 UTC", "discovered_at": "2026-10-06T16:02:44.000Z" }, { "id": 152536, "urlhaus_id": "3943836", "url": "http://176.65.139.155/armv7l", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:44 UTC", "discovered_at": "2026-10-06T16:02:44.000Z" }, { "id": 152535, "urlhaus_id": "3943837", "url": "http://176.65.139.155/armv6l", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:44 UTC", "discovered_at": "2026-10-06T16:02:44.000Z" }, { "id": 152534, "urlhaus_id": "3943838", "url": "http://176.65.139.155/mips64le", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:44 UTC", "discovered_at": "2026-10-06T16:02:44.000Z" }, { "id": 152533, "urlhaus_id": "3943839", "url": "http://176.65.139.155/armv5l", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:44 UTC", "discovered_at": "2026-10-06T16:02:44.000Z" }, { "id": 152532, "urlhaus_id": "3943840", "url": "http://176.65.139.155/ppc64le", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-155, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:44 UTC", "discovered_at": "2026-10-06T16:02:44.000Z" }, { "id": 152539, "urlhaus_id": "3943833", "url": "http://77.90.57.20:8080/bot.x86", "host": "77.90.57.20", "host_ip": "77.90.57.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "77-90-57-20-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:27 UTC", "discovered_at": "2026-10-06T16:02:27.000Z" }, { "id": 152540, "urlhaus_id": "3943832", "url": "http://176.65.139.155/run.sh", "host": "176.65.139.155", "host_ip": "176.65.139.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-155, sh, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:02:23 UTC", "discovered_at": "2026-10-06T16:02:23.000Z" }, { "id": 152541, "urlhaus_id": "3943831", "url": "http://115.62.117.185:43915/i", "host": "115.62.117.185", "host_ip": "115.62.117.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:02:20 UTC", "discovered_at": "2026-10-06T16:02:20.000Z" }, { "id": 152542, "urlhaus_id": "3943830", "url": "http://80.67.33.209:34216/i", "host": "80.67.33.209", "host_ip": "80.67.33.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 16:02:17 UTC", "discovered_at": "2026-10-06T16:02:17.000Z" }, { "id": 152544, "urlhaus_id": "3943828", "url": "http://77.90.57.20:8080/bot.mips", "host": "77.90.57.20", "host_ip": "77.90.57.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "77-90-57-20-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:01:27 UTC", "discovered_at": "2026-10-06T16:01:27.000Z" }, { "id": 152543, "urlhaus_id": "3943829", "url": "http://77.90.57.20:8080/bot_arm", "host": "77.90.57.20", "host_ip": "77.90.57.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "77-90-57-20-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 16:01:27 UTC", "discovered_at": "2026-10-06T16:01:27.000Z" }, { "id": 152545, "urlhaus_id": "3943827", "url": "http://176.65.139.204/iran.armv5l", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:29 UTC", "discovered_at": "2026-10-06T15:57:29.000Z" }, { "id": 152549, "urlhaus_id": "3943823", "url": "http://176.65.139.204/iran.mipsel", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:24 UTC", "discovered_at": "2026-10-06T15:57:24.000Z" }, { "id": 152548, "urlhaus_id": "3943824", "url": "http://176.65.139.204/iran.armv6l", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:24 UTC", "discovered_at": "2026-10-06T15:57:24.000Z" }, { "id": 152547, "urlhaus_id": "3943825", "url": "http://176.65.139.204/iran.m68k", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:24 UTC", "discovered_at": "2026-10-06T15:57:24.000Z" }, { "id": 152546, "urlhaus_id": "3943826", "url": "http://176.65.139.204/iran.sh4", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:24 UTC", "discovered_at": "2026-10-06T15:57:24.000Z" }, { "id": 152556, "urlhaus_id": "3943816", "url": "http://176.65.139.204/iran.powerpc", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:23 UTC", "discovered_at": "2026-10-06T15:57:23.000Z" }, { "id": 152555, "urlhaus_id": "3943817", "url": "http://176.65.139.204/mips", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:23 UTC", "discovered_at": "2026-10-06T15:57:23.000Z" }, { "id": 152554, "urlhaus_id": "3943818", "url": "http://176.65.139.204/iran.x86_64", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:23 UTC", "discovered_at": "2026-10-06T15:57:23.000Z" }, { "id": 152553, "urlhaus_id": "3943819", "url": "http://176.65.139.204/mipsel", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:23 UTC", "discovered_at": "2026-10-06T15:57:23.000Z" }, { "id": 152552, "urlhaus_id": "3943820", "url": "http://176.65.139.204/iran.sparc", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:23 UTC", "discovered_at": "2026-10-06T15:57:23.000Z" }, { "id": 152551, "urlhaus_id": "3943821", "url": "http://176.65.139.204/iran.armv4l", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:23 UTC", "discovered_at": "2026-10-06T15:57:23.000Z" }, { "id": 152550, "urlhaus_id": "3943822", "url": "http://176.65.139.204/iran.mipsrouter", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:57:23 UTC", "discovered_at": "2026-10-06T15:57:23.000Z" }, { "id": 152559, "urlhaus_id": "3943813", "url": "http://176.65.139.204/iran.armv7l", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:36 UTC", "discovered_at": "2026-10-06T15:56:36.000Z" }, { "id": 152558, "urlhaus_id": "3943814", "url": "http://176.65.139.204/iran.aarch64", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:36 UTC", "discovered_at": "2026-10-06T15:56:36.000Z" }, { "id": 152557, "urlhaus_id": "3943815", "url": "http://176.65.139.204/iran.mips", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:36 UTC", "discovered_at": "2026-10-06T15:56:36.000Z" }, { "id": 152561, "urlhaus_id": "3943811", "url": "http://176.65.139.204/iran.arc", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:35 UTC", "discovered_at": "2026-10-06T15:56:35.000Z" }, { "id": 152560, "urlhaus_id": "3943812", "url": "http://176.65.139.204/cat.sh", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:35 UTC", "discovered_at": "2026-10-06T15:56:35.000Z" }, { "id": 152564, "urlhaus_id": "3943808", "url": "http://176.65.139.204/bins/mipsel", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:28 UTC", "discovered_at": "2026-10-06T15:56:28.000Z" }, { "id": 152563, "urlhaus_id": "3943809", "url": "http://176.65.139.204/telnet.sh", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-204, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:28 UTC", "discovered_at": "2026-10-06T15:56:28.000Z" }, { "id": 152562, "urlhaus_id": "3943810", "url": "http://176.65.139.204/iran.i486", "host": "176.65.139.204", "host_ip": "176.65.139.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-204, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:56:28 UTC", "discovered_at": "2026-10-06T15:56:28.000Z" }, { "id": 152565, "urlhaus_id": "3943807", "url": "http://79.106.231.174:48140/bin.sh", "host": "79.106.231.174", "host_ip": "79.106.231.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 15:53:16 UTC", "discovered_at": "2026-10-06T15:53:16.000Z" }, { "id": 152566, "urlhaus_id": "3943806", "url": "http://222.246.43.55:48748/i", "host": "222.246.43.55", "host_ip": "222.246.43.55", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 15:50:34 UTC", "discovered_at": "2026-10-06T15:50:34.000Z" }, { "id": 152567, "urlhaus_id": "3943805", "url": "http://222.141.105.180:56903/i", "host": "222.141.105.180", "host_ip": "222.141.105.180", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 15:46:25 UTC", "discovered_at": "2026-10-06T15:46:25.000Z" }, { "id": 152571, "urlhaus_id": "3943801", "url": "http://115.49.4.214:33273/i", "host": "115.49.4.214", "host_ip": "115.49.4.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 15:46:24 UTC", "discovered_at": "2026-10-06T15:46:24.000Z" }, { "id": 152570, "urlhaus_id": "3943802", "url": "http://115.52.20.128:41823/i", "host": "115.52.20.128", "host_ip": "115.52.20.128", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 15:46:24 UTC", "discovered_at": "2026-10-06T15:46:24.000Z" }, { "id": 152569, "urlhaus_id": "3943803", "url": "http://180.115.161.198:55704/bin.sh", "host": "180.115.161.198", "host_ip": "180.115.161.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 15:46:24 UTC", "discovered_at": "2026-10-06T15:46:24.000Z" }, { "id": 152568, "urlhaus_id": "3943804", "url": "http://203.177.251.31:32804/i", "host": "203.177.251.31", "host_ip": "203.177.251.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 15:46:24 UTC", "discovered_at": "2026-10-06T15:46:24.000Z" }, { "id": 152572, "urlhaus_id": "3943800", "url": "http://188.187.91.186:33938/i", "host": "188.187.91.186", "host_ip": "188.187.91.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 15:32:18 UTC", "discovered_at": "2026-10-06T15:32:18.000Z" }, { "id": 152574, "urlhaus_id": "3943798", "url": "http://221.194.101.213:45123/bin.sh", "host": "221.194.101.213", "host_ip": "221.194.101.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 15:26:34 UTC", "discovered_at": "2026-10-06T15:26:34.000Z" }, { "id": 152573, "urlhaus_id": "3943799", "url": "http://77.90.57.20:8080/bot.arm7", "host": "77.90.57.20", "host_ip": "77.90.57.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-bit, elf, mirai, x86-64", "last_online": null, "first_seen": "2026-10-06 15:26:34 UTC", "discovered_at": "2026-10-06T15:26:34.000Z" }, { "id": 152579, "urlhaus_id": "3943793", "url": "http://139.162.5.254/hiddenbin/Space.mpsl", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:42 UTC", "discovered_at": "2026-10-06T15:25:42.000Z" }, { "id": 152578, "urlhaus_id": "3943794", "url": "http://139.162.5.254/hiddenbin/Space.sparc", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:42 UTC", "discovered_at": "2026-10-06T15:25:42.000Z" }, { "id": 152577, "urlhaus_id": "3943795", "url": "http://139.162.5.254/hiddenbin/Space.mips", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:42 UTC", "discovered_at": "2026-10-06T15:25:42.000Z" }, { "id": 152576, "urlhaus_id": "3943796", "url": "http://139.162.5.254/hiddenbin/Space.arm", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:42 UTC", "discovered_at": "2026-10-06T15:25:42.000Z" }, { "id": 152575, "urlhaus_id": "3943797", "url": "http://139.162.5.254/hiddenbin/Space.ppc", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:42 UTC", "discovered_at": "2026-10-06T15:25:42.000Z" }, { "id": 152580, "urlhaus_id": "3943792", "url": "http://139.162.5.254/hiddenbin/Space.sh4", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:37 UTC", "discovered_at": "2026-10-06T15:25:37.000Z" }, { "id": 152585, "urlhaus_id": "3943787", "url": "http://139.162.5.254/hiddenbin/Space.arm6", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:36 UTC", "discovered_at": "2026-10-06T15:25:36.000Z" }, { "id": 152584, "urlhaus_id": "3943788", "url": "http://139.162.5.254/hiddenbin/Space.arm5", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:36 UTC", "discovered_at": "2026-10-06T15:25:36.000Z" }, { "id": 152583, "urlhaus_id": "3943789", "url": "http://139.162.5.254/hiddenbin/Space.m68k", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:36 UTC", "discovered_at": "2026-10-06T15:25:36.000Z" }, { "id": 152582, "urlhaus_id": "3943790", "url": "http://139.162.5.254/hiddenbin/Space.mips64", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:36 UTC", "discovered_at": "2026-10-06T15:25:36.000Z" }, { "id": 152581, "urlhaus_id": "3943791", "url": "http://139.162.5.254/hiddenbin/Space.arm7", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 15:25:36 UTC", "discovered_at": "2026-10-06T15:25:36.000Z" }, { "id": 152586, "urlhaus_id": "3943786", "url": "http://77.90.57.20:8080/bot.mpsl", "host": "77.90.57.20", "host_ip": "77.90.57.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-bit, elf, mirai, x86-64", "last_online": null, "first_seen": "2026-10-06 15:25:25 UTC", "discovered_at": "2026-10-06T15:25:25.000Z" }, { "id": 152587, "urlhaus_id": "3943785", "url": "https://drive.usercontent.google.com/download?id=1zntk1iIhB4Tc_TngGAMWtYs_ObEBz9Xv&export=download", "host": "drive.usercontent.google.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-06 15:22:20 UTC", "discovered_at": "2026-10-06T15:22:20.000Z" }, { "id": 152588, "urlhaus_id": "3943784", "url": "http://157.66.146.183:44843/bin.sh", "host": "157.66.146.183", "host_ip": "157.66.146.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 15:18:26 UTC", "discovered_at": "2026-10-06T15:18:26.000Z" }, { "id": 152589, "urlhaus_id": "3943783", "url": "http://182.126.177.210:60965/i", "host": "182.126.177.210", "host_ip": "182.126.177.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 15:16:24 UTC", "discovered_at": "2026-10-06T15:16:24.000Z" }, { "id": 152590, "urlhaus_id": "3943782", "url": "http://115.49.4.214:33273/bin.sh", "host": "115.49.4.214", "host_ip": "115.49.4.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 15:16:23 UTC", "discovered_at": "2026-10-06T15:16:23.000Z" }, { "id": 152591, "urlhaus_id": "3943781", "url": "http://222.140.190.133:59112/bin.sh", "host": "222.140.190.133", "host_ip": "222.140.190.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 15:01:23 UTC", "discovered_at": "2026-10-06T15:01:23.000Z" }, { "id": 152592, "urlhaus_id": "3943780", "url": "http://120.28.195.142:55751/bin.sh", "host": "120.28.195.142", "host_ip": "120.28.195.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 14:55:44 UTC", "discovered_at": "2026-10-06T14:55:44.000Z" }, { "id": 152593, "urlhaus_id": "3943779", "url": "http://59.180.190.45:33147/i", "host": "59.180.190.45", "host_ip": "59.180.190.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:46:48 UTC", "discovered_at": "2026-10-06T14:46:48.000Z" }, { "id": 152595, "urlhaus_id": "3943777", "url": "http://42.224.98.161:41233/i", "host": "42.224.98.161", "host_ip": "42.224.98.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 14:46:27 UTC", "discovered_at": "2026-10-06T14:46:27.000Z" }, { "id": 152594, "urlhaus_id": "3943778", "url": "http://77.90.57.20:8080/bot", "host": "77.90.57.20", "host_ip": "77.90.57.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-bit, elf, mirai, x86-64", "last_online": null, "first_seen": "2026-10-06 14:46:27 UTC", "discovered_at": "2026-10-06T14:46:27.000Z" }, { "id": 152596, "urlhaus_id": "3943776", "url": "http://39.74.47.172:34375/i", "host": "39.74.47.172", "host_ip": "39.74.47.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 14:46:26 UTC", "discovered_at": "2026-10-06T14:46:26.000Z" }, { "id": 152597, "urlhaus_id": "3943775", "url": "http://123.9.197.209:60402/i", "host": "123.9.197.209", "host_ip": "123.9.197.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 14:45:26 UTC", "discovered_at": "2026-10-06T14:45:26.000Z" }, { "id": 152598, "urlhaus_id": "3943774", "url": "https://www.dropbox.com/scl/fi/i4frru67ve46dbh42gxke/DocSend.exe?rlkey=385ywqxitj0l3g5yhfsecvoke&st=8a337sm5&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook, rat, stealer", "last_online": null, "first_seen": "2026-10-06 14:32:34 UTC", "discovered_at": "2026-10-06T14:32:34.000Z" }, { "id": 152599, "urlhaus_id": "3943773", "url": "https://pub-6a90252f6d70443d960d6ac029dbd446.r2.dev/HiBitUninstaller-setup-4.0.10.zip", "host": "pub-6a90252f6d70443d960d6ac029dbd446.r2.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:31:44 UTC", "discovered_at": "2026-10-06T14:31:44.000Z" }, { "id": 152600, "urlhaus_id": "3943772", "url": "https://pub-ecb7161ffc7a4a67bdd8761583e21d16.r2.dev/miners/srbminer-3.5.6.zip", "host": "pub-ecb7161ffc7a4a67bdd8761583e21d16.r2.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:31:30 UTC", "discovered_at": "2026-10-06T14:31:30.000Z" }, { "id": 152602, "urlhaus_id": "3943770", "url": "http://60.23.233.119:37405/bin.sh", "host": "60.23.233.119", "host_ip": "60.23.233.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:31:26 UTC", "discovered_at": "2026-10-06T14:31:26.000Z" }, { "id": 152601, "urlhaus_id": "3943771", "url": "http://114.227.63.106:46296/i", "host": "114.227.63.106", "host_ip": "114.227.63.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 14:31:26 UTC", "discovered_at": "2026-10-06T14:31:26.000Z" }, { "id": 152603, "urlhaus_id": "3943769", "url": "https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:31:25 UTC", "discovered_at": "2026-10-06T14:31:25.000Z" }, { "id": 152606, "urlhaus_id": "3943766", "url": "http://175.165.82.252:42556/i", "host": "175.165.82.252", "host_ip": "175.165.82.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:31:21 UTC", "discovered_at": "2026-10-06T14:31:21.000Z" }, { "id": 152605, "urlhaus_id": "3943767", "url": "http://27.24.87.31:36523/i", "host": "27.24.87.31", "host_ip": "27.24.87.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 14:31:21 UTC", "discovered_at": "2026-10-06T14:31:21.000Z" }, { "id": 152604, "urlhaus_id": "3943768", "url": "http://27.44.145.25:34039/i", "host": "27.44.145.25", "host_ip": "27.44.145.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:31:21 UTC", "discovered_at": "2026-10-06T14:31:21.000Z" }, { "id": 152607, "urlhaus_id": "3943765", "url": "https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:31:20 UTC", "discovered_at": "2026-10-06T14:31:20.000Z" }, { "id": 152608, "urlhaus_id": "3943764", "url": "http://124.6.167.113:32933/i", "host": "124.6.167.113", "host_ip": "124.6.167.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 14:29:31 UTC", "discovered_at": "2026-10-06T14:29:31.000Z" }, { "id": 152609, "urlhaus_id": "3943763", "url": "http://123.9.197.209:60402/bin.sh", "host": "123.9.197.209", "host_ip": "123.9.197.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 14:22:23 UTC", "discovered_at": "2026-10-06T14:22:23.000Z" }, { "id": 152610, "urlhaus_id": "3943762", "url": "http://120.84.213.140:41114/bin.sh", "host": "120.84.213.140", "host_ip": "120.84.213.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:17:16 UTC", "discovered_at": "2026-10-06T14:17:16.000Z" }, { "id": 152611, "urlhaus_id": "3943761", "url": "http://27.24.87.31:36523/bin.sh", "host": "27.24.87.31", "host_ip": "27.24.87.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 14:02:22 UTC", "discovered_at": "2026-10-06T14:02:22.000Z" }, { "id": 152612, "urlhaus_id": "3943760", "url": "http://120.28.189.218:58284/i", "host": "120.28.189.218", "host_ip": "120.28.189.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 14:02:21 UTC", "discovered_at": "2026-10-06T14:02:21.000Z" }, { "id": 152613, "urlhaus_id": "3943759", "url": "http://60.23.238.248:47046/bin.sh", "host": "60.23.238.248", "host_ip": "60.23.238.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:01:22 UTC", "discovered_at": "2026-10-06T14:01:22.000Z" }, { "id": 152614, "urlhaus_id": "3943758", "url": "http://175.165.82.252:42556/bin.sh", "host": "175.165.82.252", "host_ip": "175.165.82.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 14:01:18 UTC", "discovered_at": "2026-10-06T14:01:18.000Z" }, { "id": 152615, "urlhaus_id": "3943757", "url": "http://124.6.167.113:32933/bin.sh", "host": "124.6.167.113", "host_ip": "124.6.167.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 14:00:31 UTC", "discovered_at": "2026-10-06T14:00:31.000Z" }, { "id": 152616, "urlhaus_id": "3943756", "url": "http://27.44.145.25:34039/bin.sh", "host": "27.44.145.25", "host_ip": "27.44.145.25", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 13:46:21 UTC", "discovered_at": "2026-10-06T13:46:21.000Z" }, { "id": 152617, "urlhaus_id": "3943755", "url": "http://115.56.157.241:35484/i", "host": "115.56.157.241", "host_ip": "115.56.157.241", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 13:46:20 UTC", "discovered_at": "2026-10-06T13:46:20.000Z" }, { "id": 152618, "urlhaus_id": "3943754", "url": "http://222.127.77.227:44927/bin.sh", "host": "222.127.77.227", "host_ip": "222.127.77.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 13:34:28 UTC", "discovered_at": "2026-10-06T13:34:28.000Z" }, { "id": 152619, "urlhaus_id": "3943753", "url": "http://119.117.76.203:33541/i", "host": "119.117.76.203", "host_ip": "119.117.76.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 13:31:27 UTC", "discovered_at": "2026-10-06T13:31:27.000Z" }, { "id": 152621, "urlhaus_id": "3943751", "url": "http://222.142.253.202:45452/i", "host": "222.142.253.202", "host_ip": "222.142.253.202", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 13:31:17 UTC", "discovered_at": "2026-10-06T13:31:17.000Z" }, { "id": 152620, "urlhaus_id": "3943752", "url": "http://139.162.5.254/hiddenbin/Space.i686", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-06 13:31:17 UTC", "discovered_at": "2026-10-06T13:31:17.000Z" }, { "id": 152622, "urlhaus_id": "3943750", "url": "http://112.248.144.46:59687/i", "host": "112.248.144.46", "host_ip": "112.248.144.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 13:21:29 UTC", "discovered_at": "2026-10-06T13:21:29.000Z" }, { "id": 152623, "urlhaus_id": "3943749", "url": "http://123.13.0.143:40405/i", "host": "123.13.0.143", "host_ip": "123.13.0.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 13:16:20 UTC", "discovered_at": "2026-10-06T13:16:20.000Z" }, { "id": 152624, "urlhaus_id": "3943748", "url": "http://112.248.29.124:35682/i", "host": "112.248.29.124", "host_ip": "112.248.29.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 13:01:34 UTC", "discovered_at": "2026-10-06T13:01:34.000Z" }, { "id": 152625, "urlhaus_id": "3943747", "url": "http://119.117.76.203:33541/bin.sh", "host": "119.117.76.203", "host_ip": "119.117.76.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 13:01:17 UTC", "discovered_at": "2026-10-06T13:01:17.000Z" }, { "id": 152629, "urlhaus_id": "3943743", "url": "http://190.109.227.236:44463/i", "host": "190.109.227.236", "host_ip": "190.109.227.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 13:01:16 UTC", "discovered_at": "2026-10-06T13:01:16.000Z" }, { "id": 152628, "urlhaus_id": "3943744", "url": "http://139.162.5.254/hiddenbin/Space.x86_64", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-06 13:01:16 UTC", "discovered_at": "2026-10-06T13:01:16.000Z" }, { "id": 152627, "urlhaus_id": "3943745", "url": "http://139.162.5.254/hiddenbin/Space.x86", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-06 13:01:16 UTC", "discovered_at": "2026-10-06T13:01:16.000Z" }, { "id": 152626, "urlhaus_id": "3943746", "url": "http://36.88.136.194:49711/i", "host": "36.88.136.194", "host_ip": "36.88.136.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 13:01:16 UTC", "discovered_at": "2026-10-06T13:01:16.000Z" }, { "id": 152630, "urlhaus_id": "3943742", "url": "http://185.130.235.107:8285/i", "host": "185.130.235.107", "host_ip": "185.130.235.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 13:01:15 UTC", "discovered_at": "2026-10-06T13:01:15.000Z" }, { "id": 152631, "urlhaus_id": "3943741", "url": "http://27.44.146.156:38129/i", "host": "27.44.146.156", "host_ip": "27.44.146.156", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:47:39 UTC", "discovered_at": "2026-10-06T12:47:39.000Z" }, { "id": 152633, "urlhaus_id": "3943739", "url": "http://105.225.76.225:60373/i", "host": "105.225.76.225", "host_ip": "105.225.76.225", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 12:47:20 UTC", "discovered_at": "2026-10-06T12:47:20.000Z" }, { "id": 152632, "urlhaus_id": "3943740", "url": "http://113.238.99.253:45484/i", "host": "113.238.99.253", "host_ip": "113.238.99.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:47:20 UTC", "discovered_at": "2026-10-06T12:47:20.000Z" }, { "id": 152635, "urlhaus_id": "3943737", "url": "http://175.147.38.110:33222/i", "host": "175.147.38.110", "host_ip": "175.147.38.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:47:19 UTC", "discovered_at": "2026-10-06T12:47:19.000Z" }, { "id": 152634, "urlhaus_id": "3943738", "url": "http://145.236.202.102:47311/i", "host": "145.236.202.102", "host_ip": "145.236.202.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 12:47:19 UTC", "discovered_at": "2026-10-06T12:47:19.000Z" }, { "id": 152636, "urlhaus_id": "3943736", "url": "https://omskin.org/lnvoice/ScreenConnect.ClientSetup.msi", "host": "omskin.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "screenconnect", "last_online": null, "first_seen": "2026-10-06 12:43:22 UTC", "discovered_at": "2026-10-06T12:43:22.000Z" }, { "id": 152638, "urlhaus_id": "3943734", "url": "http://113.231.230.20:55664/i", "host": "113.231.230.20", "host_ip": "113.231.230.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:32:17 UTC", "discovered_at": "2026-10-06T12:32:17.000Z" }, { "id": 152637, "urlhaus_id": "3943735", "url": "http://175.147.38.110:33222/bin.sh", "host": "175.147.38.110", "host_ip": "175.147.38.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:32:17 UTC", "discovered_at": "2026-10-06T12:32:17.000Z" }, { "id": 152641, "urlhaus_id": "3943731", "url": "http://196.190.195.130:41375/i", "host": "196.190.195.130", "host_ip": "196.190.195.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 12:32:16 UTC", "discovered_at": "2026-10-06T12:32:16.000Z" }, { "id": 152640, "urlhaus_id": "3943732", "url": "http://182.117.40.200:51544/i", "host": "182.117.40.200", "host_ip": "182.117.40.200", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 12:32:16 UTC", "discovered_at": "2026-10-06T12:32:16.000Z" }, { "id": 152639, "urlhaus_id": "3943733", "url": "http://196.190.195.130:41375/bin.sh", "host": "196.190.195.130", "host_ip": "196.190.195.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 12:32:16 UTC", "discovered_at": "2026-10-06T12:32:16.000Z" }, { "id": 152642, "urlhaus_id": "3943730", "url": "http://188.187.91.186:33938/bin.sh", "host": "188.187.91.186", "host_ip": "188.187.91.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:31:20 UTC", "discovered_at": "2026-10-06T12:31:20.000Z" }, { "id": 152643, "urlhaus_id": "3943729", "url": "https://www.dropbox.com/scl/fi/5f11m34f13trts6jj7rhi/MateFall-nstaller-Setup-1.0.0.exe?rlkey=fzctb8qe415ql6i8njxhy55c0&st=6u4vagho&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook, stealer", "last_online": null, "first_seen": "2026-10-06 12:31:03 UTC", "discovered_at": "2026-10-06T12:31:03.000Z" }, { "id": 152644, "urlhaus_id": "3943728", "url": "https://alotic.net/download.php", "host": "alotic.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "java, runelite, runelure, stealer", "last_online": null, "first_seen": "2026-10-06 12:30:23 UTC", "discovered_at": "2026-10-06T12:30:23.000Z" }, { "id": 152646, "urlhaus_id": "3943726", "url": "http://139.162.5.254/hiddenbin/Space.arc", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-06 12:30:14 UTC", "discovered_at": "2026-10-06T12:30:14.000Z" }, { "id": 152645, "urlhaus_id": "3943727", "url": "http://139.162.5.254/1.sh", "host": "139.162.5.254", "host_ip": "139.162.5.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-06 12:30:14 UTC", "discovered_at": "2026-10-06T12:30:14.000Z" }, { "id": 152647, "urlhaus_id": "3943725", "url": "http://222.139.36.192:46146/i", "host": "222.139.36.192", "host_ip": "222.139.36.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 12:17:26 UTC", "discovered_at": "2026-10-06T12:17:26.000Z" }, { "id": 152648, "urlhaus_id": "3943724", "url": "http://42.237.110.126:60869/bin.sh", "host": "42.237.110.126", "host_ip": "42.237.110.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:17:14 UTC", "discovered_at": "2026-10-06T12:17:14.000Z" }, { "id": 152649, "urlhaus_id": "3943723", "url": "http://115.56.151.141:46589/bin.sh", "host": "115.56.151.141", "host_ip": "115.56.151.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 12:17:13 UTC", "discovered_at": "2026-10-06T12:17:13.000Z" }, { "id": 152650, "urlhaus_id": "3943722", "url": "http://123.172.82.253:53359/i", "host": "123.172.82.253", "host_ip": "123.172.82.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 12:03:18 UTC", "discovered_at": "2026-10-06T12:03:18.000Z" }, { "id": 152651, "urlhaus_id": "3943721", "url": "http://175.165.86.254:44946/bin.sh", "host": "175.165.86.254", "host_ip": "175.165.86.254", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 12:02:21 UTC", "discovered_at": "2026-10-06T12:02:21.000Z" }, { "id": 152653, "urlhaus_id": "3943719", "url": "http://210.208.110.4:41566/i", "host": "210.208.110.4", "host_ip": "210.208.110.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 12:02:13 UTC", "discovered_at": "2026-10-06T12:02:13.000Z" }, { "id": 152652, "urlhaus_id": "3943720", "url": "http://27.220.121.135:60739/i", "host": "27.220.121.135", "host_ip": "27.220.121.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 12:02:13 UTC", "discovered_at": "2026-10-06T12:02:13.000Z" }, { "id": 152654, "urlhaus_id": "3943718", "url": "http://111.88.7.48:50844/i", "host": "111.88.7.48", "host_ip": "111.88.7.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 11:58:28 UTC", "discovered_at": "2026-10-06T11:58:28.000Z" }, { "id": 152655, "urlhaus_id": "3943717", "url": "http://123.53.100.94:44391/bin.sh", "host": "123.53.100.94", "host_ip": "123.53.100.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 11:49:25 UTC", "discovered_at": "2026-10-06T11:49:25.000Z" }, { "id": 152657, "urlhaus_id": "3943715", "url": "http://222.139.36.192:46146/bin.sh", "host": "222.139.36.192", "host_ip": "222.139.36.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 11:46:23 UTC", "discovered_at": "2026-10-06T11:46:23.000Z" }, { "id": 152656, "urlhaus_id": "3943716", "url": "http://221.1.110.140:46083/bin.sh", "host": "221.1.110.140", "host_ip": "221.1.110.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 11:46:23 UTC", "discovered_at": "2026-10-06T11:46:23.000Z" }, { "id": 152659, "urlhaus_id": "3943713", "url": "http://119.116.34.38:42818/i", "host": "119.116.34.38", "host_ip": "119.116.34.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 11:46:22 UTC", "discovered_at": "2026-10-06T11:46:22.000Z" }, { "id": 152658, "urlhaus_id": "3943714", "url": "http://115.61.118.217:43112/i", "host": "115.61.118.217", "host_ip": "115.61.118.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 11:46:22 UTC", "discovered_at": "2026-10-06T11:46:22.000Z" }, { "id": 152661, "urlhaus_id": "3943711", "url": "http://115.61.118.217:43112/bin.sh", "host": "115.61.118.217", "host_ip": "115.61.118.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 11:32:15 UTC", "discovered_at": "2026-10-06T11:32:15.000Z" }, { "id": 152660, "urlhaus_id": "3943712", "url": "http://61.52.47.76:37443/i", "host": "61.52.47.76", "host_ip": "61.52.47.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 11:32:15 UTC", "discovered_at": "2026-10-06T11:32:15.000Z" }, { "id": 152662, "urlhaus_id": "3943710", "url": "http://41.216.227.142:51974/bin.sh", "host": "41.216.227.142", "host_ip": "41.216.227.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 11:30:27 UTC", "discovered_at": "2026-10-06T11:30:27.000Z" }, { "id": 152663, "urlhaus_id": "3943709", "url": "http://119.116.34.38:42818/bin.sh", "host": "119.116.34.38", "host_ip": "119.116.34.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 11:16:30 UTC", "discovered_at": "2026-10-06T11:16:30.000Z" }, { "id": 152665, "urlhaus_id": "3943707", "url": "http://106.40.243.83:56462/i", "host": "106.40.243.83", "host_ip": "106.40.243.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 11:16:19 UTC", "discovered_at": "2026-10-06T11:16:19.000Z" }, { "id": 152664, "urlhaus_id": "3943708", "url": "http://27.28.97.96:57238/i", "host": "27.28.97.96", "host_ip": "27.28.97.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 11:16:19 UTC", "discovered_at": "2026-10-06T11:16:19.000Z" }, { "id": 152666, "urlhaus_id": "3943706", "url": "http://219.156.51.237:58720/i", "host": "219.156.51.237", "host_ip": "219.156.51.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 11:03:24 UTC", "discovered_at": "2026-10-06T11:03:24.000Z" }, { "id": 152667, "urlhaus_id": "3943705", "url": "http://61.52.47.76:37443/bin.sh", "host": "61.52.47.76", "host_ip": "61.52.47.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 11:02:16 UTC", "discovered_at": "2026-10-06T11:02:16.000Z" }, { "id": 152669, "urlhaus_id": "3943703", "url": "http://115.49.211.221:48972/i", "host": "115.49.211.221", "host_ip": "115.49.211.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 11:02:15 UTC", "discovered_at": "2026-10-06T11:02:15.000Z" }, { "id": 152668, "urlhaus_id": "3943704", "url": "http://219.155.228.240:45970/i", "host": "219.155.228.240", "host_ip": "219.155.228.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 11:02:15 UTC", "discovered_at": "2026-10-06T11:02:15.000Z" }, { "id": 152670, "urlhaus_id": "3943702", "url": "http://120.82.203.7:48991/bin.sh", "host": "120.82.203.7", "host_ip": "120.82.203.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 10:54:11 UTC", "discovered_at": "2026-10-06T10:54:11.000Z" }, { "id": 152671, "urlhaus_id": "3943701", "url": "http://222.127.243.18:56892/bin.sh", "host": "222.127.243.18", "host_ip": "222.127.243.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 10:49:25 UTC", "discovered_at": "2026-10-06T10:49:25.000Z" }, { "id": 152673, "urlhaus_id": "3943699", "url": "http://115.50.221.110:42445/i", "host": "115.50.221.110", "host_ip": "115.50.221.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 10:47:13 UTC", "discovered_at": "2026-10-06T10:47:13.000Z" }, { "id": 152672, "urlhaus_id": "3943700", "url": "http://60.176.8.34:50001/i", "host": "60.176.8.34", "host_ip": "60.176.8.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 10:47:13 UTC", "discovered_at": "2026-10-06T10:47:13.000Z" }, { "id": 152674, "urlhaus_id": "3943698", "url": "http://212.50.57.143:39109/Mozi.m", "host": "212.50.57.143", "host_ip": "212.50.57.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 10:38:13 UTC", "discovered_at": "2026-10-06T10:38:13.000Z" }, { "id": 152675, "urlhaus_id": "3943697", "url": "http://219.140.4.10:49905/i", "host": "219.140.4.10", "host_ip": "219.140.4.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 10:31:21 UTC", "discovered_at": "2026-10-06T10:31:21.000Z" }, { "id": 152676, "urlhaus_id": "3943696", "url": "http://219.155.228.240:45970/bin.sh", "host": "219.155.228.240", "host_ip": "219.155.228.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 10:31:19 UTC", "discovered_at": "2026-10-06T10:31:19.000Z" }, { "id": 152679, "urlhaus_id": "3943693", "url": "http://115.49.77.201:50748/i", "host": "115.49.77.201", "host_ip": "115.49.77.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 10:31:18 UTC", "discovered_at": "2026-10-06T10:31:18.000Z" }, { "id": 152678, "urlhaus_id": "3943694", "url": "http://60.23.235.214:54222/i", "host": "60.23.235.214", "host_ip": "60.23.235.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 10:31:18 UTC", "discovered_at": "2026-10-06T10:31:18.000Z" }, { "id": 152677, "urlhaus_id": "3943695", "url": "http://115.49.211.221:48972/bin.sh", "host": "115.49.211.221", "host_ip": "115.49.211.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 10:31:18 UTC", "discovered_at": "2026-10-06T10:31:18.000Z" }, { "id": 152680, "urlhaus_id": "3943692", "url": "http://105.225.99.19:56395/i", "host": "105.225.99.19", "host_ip": "105.225.99.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 10:17:16 UTC", "discovered_at": "2026-10-06T10:17:16.000Z" }, { "id": 152682, "urlhaus_id": "3943690", "url": "http://125.47.92.67:53822/i", "host": "125.47.92.67", "host_ip": "125.47.92.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 10:17:15 UTC", "discovered_at": "2026-10-06T10:17:15.000Z" }, { "id": 152681, "urlhaus_id": "3943691", "url": "http://124.161.116.2:33833/i", "host": "124.161.116.2", "host_ip": "124.161.116.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 10:17:15 UTC", "discovered_at": "2026-10-06T10:17:15.000Z" }, { "id": 152683, "urlhaus_id": "3943689", "url": "http://123.8.26.165:34881/bin.sh", "host": "123.8.26.165", "host_ip": "123.8.26.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 10:13:18 UTC", "discovered_at": "2026-10-06T10:13:18.000Z" }, { "id": 152684, "urlhaus_id": "3943688", "url": "http://60.23.235.214:54222/bin.sh", "host": "60.23.235.214", "host_ip": "60.23.235.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 10:02:17 UTC", "discovered_at": "2026-10-06T10:02:17.000Z" }, { "id": 152685, "urlhaus_id": "3943687", "url": "http://182.117.30.4:42520/i", "host": "182.117.30.4", "host_ip": "182.117.30.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 10:00:22 UTC", "discovered_at": "2026-10-06T10:00:22.000Z" }, { "id": 152686, "urlhaus_id": "3943686", "url": "http://1.57.109.163:46379/i", "host": "1.57.109.163", "host_ip": "1.57.109.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 09:59:22 UTC", "discovered_at": "2026-10-06T09:59:22.000Z" }, { "id": 152687, "urlhaus_id": "3943685", "url": "http://42.55.115.171:56220/bin.sh", "host": "42.55.115.171", "host_ip": "42.55.115.171", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 09:52:25 UTC", "discovered_at": "2026-10-06T09:52:25.000Z" }, { "id": 152688, "urlhaus_id": "3943684", "url": "http://182.117.30.4:42520/bin.sh", "host": "182.117.30.4", "host_ip": "182.117.30.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-06 09:50:21 UTC", "discovered_at": "2026-10-06T09:50:21.000Z" }, { "id": 152689, "urlhaus_id": "3943683", "url": "http://120.28.161.11:38596/bin.sh", "host": "120.28.161.11", "host_ip": "120.28.161.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 09:49:24 UTC", "discovered_at": "2026-10-06T09:49:24.000Z" }, { "id": 152693, "urlhaus_id": "3943679", "url": "http://125.47.92.67:53822/bin.sh", "host": "125.47.92.67", "host_ip": "125.47.92.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 09:49:16 UTC", "discovered_at": "2026-10-06T09:49:16.000Z" }, { "id": 152692, "urlhaus_id": "3943680", "url": "http://182.53.98.93:57823/i", "host": "182.53.98.93", "host_ip": "182.53.98.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 09:49:16 UTC", "discovered_at": "2026-10-06T09:49:16.000Z" }, { "id": 152691, "urlhaus_id": "3943681", "url": "https://raw.githubusercontent.com/the-vishal-gupta/Question_Answering-_System/main/saasenv/Include/site/python3.12/greenlet/System_Question_Answering_v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:49:16 UTC", "discovered_at": "2026-10-06T09:49:16.000Z" }, { "id": 152690, "urlhaus_id": "3943682", "url": "https://raw.githubusercontent.com/Jts36/LanguageModel/main/alphabetist/Model-Language-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:49:16 UTC", "discovered_at": "2026-10-06T09:49:16.000Z" }, { "id": 152694, "urlhaus_id": "3943678", "url": "http://115.49.77.201:50748/bin.sh", "host": "115.49.77.201", "host_ip": "115.49.77.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 09:49:15 UTC", "discovered_at": "2026-10-06T09:49:15.000Z" }, { "id": 152700, "urlhaus_id": "3943672", "url": "https://github.com/Sam1032/rust-macro-magic/raw/refs/heads/branch/coprojector/macro-rust-magic-v3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:04 UTC", "discovered_at": "2026-10-06T09:35:04.000Z" }, { "id": 152699, "urlhaus_id": "3943673", "url": "https://github.com/aman29100/GPT-Awesome-List-Generator/raw/refs/heads/main/section_data_pipelines/List-Awesome-Generator-GP-v2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:04 UTC", "discovered_at": "2026-10-06T09:35:04.000Z" }, { "id": 152698, "urlhaus_id": "3943674", "url": "https://raw.githubusercontent.com/oliverquaye23/ai-directories/main/Pholadacea/ai_directories_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:04 UTC", "discovered_at": "2026-10-06T09:35:04.000Z" }, { "id": 152697, "urlhaus_id": "3943675", "url": "https://raw.githubusercontent.com/PALAUZERA/online-product-shop/main/src/main/online_shop_product_v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:04 UTC", "discovered_at": "2026-10-06T09:35:04.000Z" }, { "id": 152696, "urlhaus_id": "3943676", "url": "https://raw.githubusercontent.com/Spidy57/Tools-Void57/main/Vulnerability-Scanner/Void-Tools-2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:04 UTC", "discovered_at": "2026-10-06T09:35:04.000Z" }, { "id": 152695, "urlhaus_id": "3943677", "url": "https://raw.githubusercontent.com/Southla/Supervised_Learning/main/fiedlerite/Supervised-Learning-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:04 UTC", "discovered_at": "2026-10-06T09:35:04.000Z" }, { "id": 152705, "urlhaus_id": "3943667", "url": "https://raw.githubusercontent.com/Dwifiqkri/pert5/main/galactoma/pert5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:03 UTC", "discovered_at": "2026-10-06T09:35:03.000Z" }, { "id": 152704, "urlhaus_id": "3943668", "url": "https://github.com/amoosghori/employeenodejs/raw/refs/heads/master/node_modules/yargs-parser/Software-hubbly.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:03 UTC", "discovered_at": "2026-10-06T09:35:03.000Z" }, { "id": 152703, "urlhaus_id": "3943669", "url": "https://github.com/pankaj376/AutoNiche-Intelligence-Engine/raw/refs/heads/main/automation/Niche_Engine_Auto_Intelligence_2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:03 UTC", "discovered_at": "2026-10-06T09:35:03.000Z" }, { "id": 152702, "urlhaus_id": "3943670", "url": "https://github.com/Tarique775/Uptime-Monitoring-Api-raw-nodejs/raw/refs/heads/main/.data/tokenData/Api-Monitoring-nodejs-raw-Uptime-v3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:03 UTC", "discovered_at": "2026-10-06T09:35:03.000Z" }, { "id": 152701, "urlhaus_id": "3943671", "url": "https://github.com/vikodevik/focuscli/raw/refs/heads/main/focuscli/Software_3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:03 UTC", "discovered_at": "2026-10-06T09:35:03.000Z" }, { "id": 152710, "urlhaus_id": "3943662", "url": "https://raw.githubusercontent.com/BVNAHUSH/TERM-LENS-AI/main/web-client/AI_TER_LEN_v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:02 UTC", "discovered_at": "2026-10-06T09:35:02.000Z" }, { "id": 152709, "urlhaus_id": "3943663", "url": "https://raw.githubusercontent.com/kiran03-jagadeesh/ES6-Javascript-Assignment/main/fitted/Assignment_Javascript_E_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:02 UTC", "discovered_at": "2026-10-06T09:35:02.000Z" }, { "id": 152708, "urlhaus_id": "3943664", "url": "https://github.com/code-iddih/JavaScript-Test-Solutions/raw/refs/heads/master/untunefully/Test_Script_Java_Solutions_2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:02 UTC", "discovered_at": "2026-10-06T09:35:02.000Z" }, { "id": 152707, "urlhaus_id": "3943665", "url": "https://raw.githubusercontent.com/rainesalvo/Valtheria-Lisence-System/main/bethrall/System_Lisence_Valtheria_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:02 UTC", "discovered_at": "2026-10-06T09:35:02.000Z" }, { "id": 152706, "urlhaus_id": "3943666", "url": "https://github.com/demogrito/DocEx/raw/refs/heads/main/DisordExf/Doc-Ex-3.9-beta.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:02 UTC", "discovered_at": "2026-10-06T09:35:02.000Z" }, { "id": 152712, "urlhaus_id": "3943660", "url": "https://github.com/DreamlandSR/Project/raw/refs/heads/main/public/vendors/typeahead.js/Software_1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:01 UTC", "discovered_at": "2026-10-06T09:35:01.000Z" }, { "id": 152711, "urlhaus_id": "3943661", "url": "https://github.com/catsoft321/ChatDotNetUS/releases/download/v1.0/Release_x64.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:35:01 UTC", "discovered_at": "2026-10-06T09:35:01.000Z" }, { "id": 152713, "urlhaus_id": "3943659", "url": "https://github.com/4FEDS/3d-Portfolio/raw/refs/heads/main/src/components/models/d-Portfolio-v3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:59 UTC", "discovered_at": "2026-10-06T09:34:59.000Z" }, { "id": 152717, "urlhaus_id": "3943655", "url": "https://raw.githubusercontent.com/Slepj/Quiz-Master-App-V1/main/instance/Quiz_Master_App_v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:57 UTC", "discovered_at": "2026-10-06T09:34:57.000Z" }, { "id": 152716, "urlhaus_id": "3943656", "url": "https://github.com/ITACHIabimem/Alpha/raw/refs/heads/main/testation/Software-3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:57 UTC", "discovered_at": "2026-10-06T09:34:57.000Z" }, { "id": 152715, "urlhaus_id": "3943657", "url": "https://raw.githubusercontent.com/HenryBrewer/SNU_2D_CloudDrive_Modes/main/nondyspeptic/Cloud-Drive-Modes-SN-3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:57 UTC", "discovered_at": "2026-10-06T09:34:57.000Z" }, { "id": 152714, "urlhaus_id": "3943658", "url": "https://raw.githubusercontent.com/Tarakqovsu7/Roblox-Ronix/master/postrectal/Roblox_Ronix_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:57 UTC", "discovered_at": "2026-10-06T09:34:57.000Z" }, { "id": 152719, "urlhaus_id": "3943653", "url": "https://github.com/ESLAM-MOHAMMED-SAEED/SurvivalMod-Tool/raw/refs/heads/main/glueyness/Tool-Survival-Mod-v2.0-alpha.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:56 UTC", "discovered_at": "2026-10-06T09:34:56.000Z" }, { "id": 152718, "urlhaus_id": "3943654", "url": "https://raw.githubusercontent.com/jones0chikwezga/usermanagement/main/src/models/Software_Tillodontidae.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:56 UTC", "discovered_at": "2026-10-06T09:34:56.000Z" }, { "id": 152720, "urlhaus_id": "3943652", "url": "https://raw.githubusercontent.com/YamanL/AI-Its-Applications/main/pneumopyothorax/Its-A-Applications-2.9-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:55 UTC", "discovered_at": "2026-10-06T09:34:55.000Z" }, { "id": 152726, "urlhaus_id": "3943646", "url": "http://27.21.24.136:39806/bin.sh", "host": "27.21.24.136", "host_ip": "27.21.24.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 09:34:54 UTC", "discovered_at": "2026-10-06T09:34:54.000Z" }, { "id": 152725, "urlhaus_id": "3943647", "url": "https://github.com/yamaday88/gallery-of-lattice-Boltzmann-code/raw/refs/heads/master/unmathematical/gallery_Boltzmann_lattice_code_of_v2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:54 UTC", "discovered_at": "2026-10-06T09:34:54.000Z" }, { "id": 152724, "urlhaus_id": "3943648", "url": "https://github.com/shahriarrafi/petrichor-environment-testing/raw/refs/heads/main/components/petrichor-environment-testing-ultraenforcement.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:54 UTC", "discovered_at": "2026-10-06T09:34:54.000Z" }, { "id": 152723, "urlhaus_id": "3943649", "url": "https://github.com/TheClaverOne/TheLastYear/raw/refs/heads/main/public/Last_Year_The_2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:54 UTC", "discovered_at": "2026-10-06T09:34:54.000Z" }, { "id": 152722, "urlhaus_id": "3943650", "url": "https://github.com/Balamahesh7204/Balamahesh7204/raw/refs/heads/main/Ortalis/Balamahesh-3.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:54 UTC", "discovered_at": "2026-10-06T09:34:54.000Z" }, { "id": 152721, "urlhaus_id": "3943651", "url": "https://github.com/andreaignazio/NoteManager/raw/refs/heads/main/frontend/src/stores/Note_Manager_2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:54 UTC", "discovered_at": "2026-10-06T09:34:54.000Z" }, { "id": 152732, "urlhaus_id": "3943640", "url": "https://raw.githubusercontent.com/iftekharul01/trackersheet/main/web/Software_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:51 UTC", "discovered_at": "2026-10-06T09:34:51.000Z" }, { "id": 152731, "urlhaus_id": "3943641", "url": "https://github.com/elnatnael/alx_travel_app_0x02/raw/refs/heads/main/alx_travel_app/listings/travel-x-app-alx-v3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:51 UTC", "discovered_at": "2026-10-06T09:34:51.000Z" }, { "id": 152730, "urlhaus_id": "3943642", "url": "https://raw.githubusercontent.com/vinit77-op/electronics-store/master/store/store_electronics_v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:51 UTC", "discovered_at": "2026-10-06T09:34:51.000Z" }, { "id": 152729, "urlhaus_id": "3943643", "url": "https://raw.githubusercontent.com/prasdionaditya/adpl-kelompok-6.1-6.2/main/bootstrap/cache/kelompok_adpl_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:51 UTC", "discovered_at": "2026-10-06T09:34:51.000Z" }, { "id": 152728, "urlhaus_id": "3943644", "url": "https://raw.githubusercontent.com/VenkateshPalagurla/CyberKit/main/tools/Kit-Cyber-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:51 UTC", "discovered_at": "2026-10-06T09:34:51.000Z" }, { "id": 152727, "urlhaus_id": "3943645", "url": "https://raw.githubusercontent.com/DhazX95/ClairObscurExpedition33-HackLab/main/miryachit/Expedition_Clair_Lab_Hack_Obscur_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:51 UTC", "discovered_at": "2026-10-06T09:34:51.000Z" }, { "id": 152735, "urlhaus_id": "3943637", "url": "https://raw.githubusercontent.com/usen99/ESP32_BLE_Arduino/master/examples/BLE_write/ES_BL_Arduino_v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:50 UTC", "discovered_at": "2026-10-06T09:34:50.000Z" }, { "id": 152734, "urlhaus_id": "3943638", "url": "https://raw.githubusercontent.com/yoniespaa/PizzaFrontEnd/master/src/app/home/Pizza-End-Front-3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:50 UTC", "discovered_at": "2026-10-06T09:34:50.000Z" }, { "id": 152733, "urlhaus_id": "3943639", "url": "https://raw.githubusercontent.com/LeboMeje/Research-Project-approval-Part-1/master/static/approval_Part_Research_Project_v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:50 UTC", "discovered_at": "2026-10-06T09:34:50.000Z" }, { "id": 152738, "urlhaus_id": "3943634", "url": "https://raw.githubusercontent.com/Carlrevive/Syntecxhub_Project_Name/main/statuarist/Name-Syntecxhub-Project-3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:49 UTC", "discovered_at": "2026-10-06T09:34:49.000Z" }, { "id": 152737, "urlhaus_id": "3943635", "url": "https://github.com/rmnask2/Chatterly-JWT-Secured-Realtime-Communication-Engine/raw/refs/heads/main/backend/src/routes/Secured_JW_Communication_Engine_Realtime_Chatterly_v3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:49 UTC", "discovered_at": "2026-10-06T09:34:49.000Z" }, { "id": 152736, "urlhaus_id": "3943636", "url": "https://github.com/glakshya20/login_project/raw/refs/heads/main/natr/project_login_2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:49 UTC", "discovered_at": "2026-10-06T09:34:49.000Z" }, { "id": 152739, "urlhaus_id": "3943633", "url": "https://raw.githubusercontent.com/rajesh-1984/UniReal/main/data_construct/subject_customization/training/assets/Real-Uni-v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:48 UTC", "discovered_at": "2026-10-06T09:34:48.000Z" }, { "id": 152742, "urlhaus_id": "3943630", "url": "https://github.com/RazvaN777/Atlyss-Cheats/raw/refs/heads/main/prediscontented/Atlyss-Cheats-2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:47 UTC", "discovered_at": "2026-10-06T09:34:47.000Z" }, { "id": 152741, "urlhaus_id": "3943631", "url": "https://raw.githubusercontent.com/jones0chikwezga/currency_converter_app/main/ios/Runner/Assets.xcassets/AppIcon.appiconset/currency-converter-app-leadable.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:47 UTC", "discovered_at": "2026-10-06T09:34:47.000Z" }, { "id": 152740, "urlhaus_id": "3943632", "url": "https://raw.githubusercontent.com/vitao2222/Nexa-Music/main/twentymo/Nexa-Music.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:47 UTC", "discovered_at": "2026-10-06T09:34:47.000Z" }, { "id": 152748, "urlhaus_id": "3943624", "url": "https://raw.githubusercontent.com/duduzin2301/GrowFit/main/Lohana/Fit_Grow_v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:46 UTC", "discovered_at": "2026-10-06T09:34:46.000Z" }, { "id": 152747, "urlhaus_id": "3943625", "url": "https://raw.githubusercontent.com/Habib255/child-care-hospital-product-analysis/main/src/components/About/analysis-hospital-child-product-care-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:46 UTC", "discovered_at": "2026-10-06T09:34:46.000Z" }, { "id": 152746, "urlhaus_id": "3943626", "url": "https://github.com/Kfirm1208/Kfirm1208/raw/refs/heads/main/Clepsine/Kfirm-v3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:46 UTC", "discovered_at": "2026-10-06T09:34:46.000Z" }, { "id": 152745, "urlhaus_id": "3943627", "url": "https://github.com/cavhd2/Synthron-CFD-Trader-PRO/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:46 UTC", "discovered_at": "2026-10-06T09:34:46.000Z" }, { "id": 152744, "urlhaus_id": "3943628", "url": "https://raw.githubusercontent.com/andry06/flutter_new_app/main/herbarism/flutter_new_app.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:46 UTC", "discovered_at": "2026-10-06T09:34:46.000Z" }, { "id": 152743, "urlhaus_id": "3943629", "url": "https://raw.githubusercontent.com/BinKeinSweater/kimi/main/ommateal/Software-1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:46 UTC", "discovered_at": "2026-10-06T09:34:46.000Z" }, { "id": 152749, "urlhaus_id": "3943623", "url": "https://github.com/ToNiePiter/edius-grass-valley-premium-unlock/raw/refs/heads/branch/sphaeridial/premium-unlock-valley-edius-grass-v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:45 UTC", "discovered_at": "2026-10-06T09:34:45.000Z" }, { "id": 152753, "urlhaus_id": "3943619", "url": "http://1.57.109.163:46379/bin.sh", "host": "1.57.109.163", "host_ip": "1.57.109.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-06 09:34:44 UTC", "discovered_at": "2026-10-06T09:34:44.000Z" }, { "id": 152752, "urlhaus_id": "3943620", "url": "https://raw.githubusercontent.com/MnD35/devtest.github.io/main/docs/github-io-devtest-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:44 UTC", "discovered_at": "2026-10-06T09:34:44.000Z" }, { "id": 152751, "urlhaus_id": "3943621", "url": "https://github.com/roynaldo1234/my.github.io/raw/refs/heads/master/images/my-io-github-v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:44 UTC", "discovered_at": "2026-10-06T09:34:44.000Z" }, { "id": 152750, "urlhaus_id": "3943622", "url": "https://github.com/Habib255/moto-parts-client-side/raw/refs/heads/main/src/side-moto-client-parts-v2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:44 UTC", "discovered_at": "2026-10-06T09:34:44.000Z" }, { "id": 152757, "urlhaus_id": "3943615", "url": "https://raw.githubusercontent.com/Haffou/Review-App/main/public/img/Review_App_1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:43 UTC", "discovered_at": "2026-10-06T09:34:43.000Z" }, { "id": 152756, "urlhaus_id": "3943616", "url": "https://raw.githubusercontent.com/BeginnerDevVN/Celery-Task-Queue-latest-2025/main/folksiness/Queue-latest-Task-Celery-2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:43 UTC", "discovered_at": "2026-10-06T09:34:43.000Z" }, { "id": 152755, "urlhaus_id": "3943617", "url": "https://github.com/Suman1214129/R-PROJECT-06/raw/refs/heads/main/src/app/profile/PROJEC_v1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:43 UTC", "discovered_at": "2026-10-06T09:34:43.000Z" }, { "id": 152754, "urlhaus_id": "3943618", "url": "https://raw.githubusercontent.com/Chirikikuto/Music-Theory/main/pneumography/Music_Theory_3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:43 UTC", "discovered_at": "2026-10-06T09:34:43.000Z" }, { "id": 152761, "urlhaus_id": "3943611", "url": "https://raw.githubusercontent.com/Megog/Code-Mart/main/apps/billing/Mart_Code_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:42 UTC", "discovered_at": "2026-10-06T09:34:42.000Z" }, { "id": 152760, "urlhaus_id": "3943612", "url": "https://raw.githubusercontent.com/Whotz1320/communication-protocols-with-pic16f877a/master/Images/f-a-pic-with-protocols-communication-v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:42 UTC", "discovered_at": "2026-10-06T09:34:42.000Z" }, { "id": 152759, "urlhaus_id": "3943613", "url": "https://github.com/PureLmnz/Cloud-Admin-Proj/raw/refs/heads/main/aspergillin/Admin_Proj_Cloud_v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:42 UTC", "discovered_at": "2026-10-06T09:34:42.000Z" }, { "id": 152758, "urlhaus_id": "3943614", "url": "https://github.com/Joe826-studio/LinkedIn-Sales-Automation-Suite/raw/refs/heads/main/antifelony/In-Suite-Sales-Automation-Linked-v2.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:42 UTC", "discovered_at": "2026-10-06T09:34:42.000Z" }, { "id": 152763, "urlhaus_id": "3943609", "url": "https://raw.githubusercontent.com/peterodhiamboo/working-next/branchizo/synarchy/next-working-journal.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:41 UTC", "discovered_at": "2026-10-06T09:34:41.000Z" }, { "id": 152762, "urlhaus_id": "3943610", "url": "https://raw.githubusercontent.com/03Anmol/COCO-JSON2YOLO/main/incurably/YOLO_JSO_COC_3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:41 UTC", "discovered_at": "2026-10-06T09:34:41.000Z" }, { "id": 152765, "urlhaus_id": "3943607", "url": "https://raw.githubusercontent.com/andry06/andry06.github.io/main/linguistically/andry06.github.io.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:40 UTC", "discovered_at": "2026-10-06T09:34:40.000Z" }, { "id": 152764, "urlhaus_id": "3943608", "url": "https://github.com/PavelVoz/PavelVoz.github.io/raw/refs/heads/main/galactopoiesis/Voz-github-Pavel-io-v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:40 UTC", "discovered_at": "2026-10-06T09:34:40.000Z" }, { "id": 152770, "urlhaus_id": "3943602", "url": "https://github.com/Hill-Sudani/Barter-System-4/raw/refs/heads/main/assets/System-Barter-v3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:39 UTC", "discovered_at": "2026-10-06T09:34:39.000Z" }, { "id": 152769, "urlhaus_id": "3943603", "url": "https://raw.githubusercontent.com/Gajendrakmt9079/gajendra-portfolio-/main/hooks/gajendra-portfolio-antisine.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:39 UTC", "discovered_at": "2026-10-06T09:34:39.000Z" }, { "id": 152768, "urlhaus_id": "3943604", "url": "https://github.com/Elpolakos/test78/releases/download/v2.0/Release_x64.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:39 UTC", "discovered_at": "2026-10-06T09:34:39.000Z" }, { "id": 152767, "urlhaus_id": "3943605", "url": "https://github.com/Abdul-Wahid-01/jetbrains-ai-proxy/raw/refs/heads/main/internal/config/ai_jetbrains_proxy_2.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:39 UTC", "discovered_at": "2026-10-06T09:34:39.000Z" }, { "id": 152766, "urlhaus_id": "3943606", "url": "https://raw.githubusercontent.com/raineislam/pi-car-sever-client/master/arduino/rc_driver/sever-car-pi-client-v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:39 UTC", "discovered_at": "2026-10-06T09:34:39.000Z" }, { "id": 152771, "urlhaus_id": "3943601", "url": "https://github.com/awdawda12/EMAIL2_Filters_Sieve/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:38 UTC", "discovered_at": "2026-10-06T09:34:38.000Z" }, { "id": 152774, "urlhaus_id": "3943598", "url": "https://raw.githubusercontent.com/Reaperlix/Fixing-Error-0x887A0020/master/src/Fixing_Error_x_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:37 UTC", "discovered_at": "2026-10-06T09:34:37.000Z" }, { "id": 152773, "urlhaus_id": "3943599", "url": "https://raw.githubusercontent.com/Axolotl1622/Eth-Miner/main/uncontrovertable/Miner-Eth-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:37 UTC", "discovered_at": "2026-10-06T09:34:37.000Z" }, { "id": 152772, "urlhaus_id": "3943600", "url": "http://222.127.71.33:40089/i", "host": "222.127.71.33", "host_ip": "222.127.71.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 09:34:37 UTC", "discovered_at": "2026-10-06T09:34:37.000Z" }, { "id": 152775, "urlhaus_id": "3943597", "url": "https://raw.githubusercontent.com/5haled23/yarimono-dlc2-content-unlocked/branch/movingly/yarimono-dlc-unlocked-content-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:35 UTC", "discovered_at": "2026-10-06T09:34:35.000Z" }, { "id": 152777, "urlhaus_id": "3943595", "url": "https://raw.githubusercontent.com/Mattialesto/freelando_webapi_course-alura-entity-framework-core-transactions_part-1_dotnet-8_csharp-12/main/proudhearted/alura-entity-course-core-freelando-csharp-webapi-part-transactions-dotnet-framework-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:34 UTC", "discovered_at": "2026-10-06T09:34:34.000Z" }, { "id": 152776, "urlhaus_id": "3943596", "url": "https://raw.githubusercontent.com/rashellerim/CopyButton/main/impertinacy/Button-Copy-v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:34 UTC", "discovered_at": "2026-10-06T09:34:34.000Z" }, { "id": 152778, "urlhaus_id": "3943594", "url": "https://github.com/iftekharul01/digital_farmer_assistant_portal/raw/refs/heads/main/storage/framework/farmer-assistant-portal-digital-v1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:32 UTC", "discovered_at": "2026-10-06T09:34:32.000Z" }, { "id": 152780, "urlhaus_id": "3943592", "url": "https://github.com/thugyi/vue.js/raw/refs/heads/master/storage/framework/vue_js_v1.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:30 UTC", "discovered_at": "2026-10-06T09:34:30.000Z" }, { "id": 152779, "urlhaus_id": "3943593", "url": "https://raw.githubusercontent.com/adesh777/intermediate-python-course/master/trophogeny/course-intermediate-python-v2.7-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:30 UTC", "discovered_at": "2026-10-06T09:34:30.000Z" }, { "id": 152785, "urlhaus_id": "3943587", "url": "https://raw.githubusercontent.com/adesh777/adesh777/main/disastrousness/adesh_v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:27 UTC", "discovered_at": "2026-10-06T09:34:27.000Z" }, { "id": 152784, "urlhaus_id": "3943588", "url": "https://raw.githubusercontent.com/Gabrielyop50/BotDeGabriel/master/data/De-Gabriel-Bot-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:27 UTC", "discovered_at": "2026-10-06T09:34:27.000Z" }, { "id": 152783, "urlhaus_id": "3943589", "url": "https://raw.githubusercontent.com/MesserUY/server-template/main/src/graphql/server_template_3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:27 UTC", "discovered_at": "2026-10-06T09:34:27.000Z" }, { "id": 152782, "urlhaus_id": "3943590", "url": "https://raw.githubusercontent.com/VLADMER79/first-os/main/files/system/usr/os_first_v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:27 UTC", "discovered_at": "2026-10-06T09:34:27.000Z" }, { "id": 152781, "urlhaus_id": "3943591", "url": "https://raw.githubusercontent.com/moron04/discord-antinuke-selfbot/master/data/selfbot-antinuke-discord-v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:27 UTC", "discovered_at": "2026-10-06T09:34:27.000Z" }, { "id": 152790, "urlhaus_id": "3943582", "url": "https://raw.githubusercontent.com/ryuk956983/new-tail/main/.github/tail_new_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:26 UTC", "discovered_at": "2026-10-06T09:34:26.000Z" }, { "id": 152789, "urlhaus_id": "3943583", "url": "https://github.com/rjzxui/Valorant-Account-Checker/raw/refs/heads/main/results/Valorant_Account_Checker_acondylous.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:26 UTC", "discovered_at": "2026-10-06T09:34:26.000Z" }, { "id": 152788, "urlhaus_id": "3943584", "url": "https://github.com/masterweapon970/killing-floor-3-advantage-suite/raw/refs/heads/branch/schloop/floor-suite-advantage-killing-dogmatically.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:26 UTC", "discovered_at": "2026-10-06T09:34:26.000Z" }, { "id": 152787, "urlhaus_id": "3943585", "url": "https://raw.githubusercontent.com/adesh777/satimeet.github.io/main/node_modules/@material-ui/core/es/TableSortLabel/satimeet-io-github-physiatrical.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:26 UTC", "discovered_at": "2026-10-06T09:34:26.000Z" }, { "id": 152786, "urlhaus_id": "3943586", "url": "https://raw.githubusercontent.com/Carlrevive/Syntecxhub_Project_Name3/main/benchland/Name-Syntecxhub-Project-mortician.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:26 UTC", "discovered_at": "2026-10-06T09:34:26.000Z" }, { "id": 152808, "urlhaus_id": "3943564", "url": "https://github.com/mariahoyos2002/Android-x64_LiveCD_6B_Docs/releases/download/v1.0/Program.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152807, "urlhaus_id": "3943565", "url": "https://github.com/Jennifer12345568/securebase/releases/download/v1.0/Program.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152806, "urlhaus_id": "3943566", "url": "https://raw.githubusercontent.com/RodrigoDevBnu/RodrigoDevBnu/main/buran/Bnu-Rodrigo-Dev-3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152805, "urlhaus_id": "3943567", "url": "https://github.com/Shadow10010/cachify/releases/download/v1.0/Release.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152804, "urlhaus_id": "3943568", "url": "https://github.com/BVNAHUSH/WIKI-RAG/raw/refs/heads/main/advocator/WIK-RAG-v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152803, "urlhaus_id": "3943569", "url": "https://raw.githubusercontent.com/devwarly/finance-tracker-firebase-js/main/src/js-firebase-finance-tracker-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152802, "urlhaus_id": "3943570", "url": "https://github.com/huh117/Hamster-Kombat-Bot/releases/download/v2.0/Program.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152801, "urlhaus_id": "3943571", "url": "https://github.com/PavelVoz/IconPackApp/raw/refs/heads/main/icons/style1/Pack-App-Icon-3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152800, "urlhaus_id": "3943572", "url": "https://github.com/BVNAHUSH/YOUTUBE-CLONE/raw/refs/heads/main/html/CLONE-YOUTUB-1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152799, "urlhaus_id": "3943573", "url": "https://github.com/jones0chikwezga/Shop-app-flutter/raw/refs/heads/main/ios/app_flutter_Shop_v3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152798, "urlhaus_id": "3943574", "url": "https://github.com/faiyusuf/mhrise-nsfw-mods-hub/raw/refs/heads/branch/undyingly/hub_nsfw_mods_mhrise_2.7-beta.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152797, "urlhaus_id": "3943575", "url": "https://github.com/Suman1214129/Student_Management-Redux/raw/refs/heads/master/src/Features/Student-Management-Redux-2.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152796, "urlhaus_id": "3943576", "url": "https://github.com/dilan1001/iis_gen/raw/refs/heads/main/namazlik/gen-iis-1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152795, "urlhaus_id": "3943577", "url": "https://github.com/Shrief-Salama/apr-refactor/raw/refs/heads/master/src/base/apr_refactor_3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152794, "urlhaus_id": "3943578", "url": "https://github.com/vieht3987/hyprstack/raw/refs/heads/main/forevalue/Software-v2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152793, "urlhaus_id": "3943579", "url": "https://github.com/Harini-sm/cookai-culinary-magic/raw/refs/heads/main/supabase/functions/text-to-speech/magic_cookai_culinary_3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152792, "urlhaus_id": "3943580", "url": "https://github.com/postterza1804/deliver-at-all-costs-trainer-ultimate-injector/raw/refs/heads/branch/monophthongal/at-costs-injector-deliver-trainer-ultimate-all-v2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152791, "urlhaus_id": "3943581", "url": "https://github.com/malakhdj/SecurEZZY/raw/refs/heads/main/tests/EZZY-Secur-v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:25 UTC", "discovered_at": "2026-10-06T09:34:25.000Z" }, { "id": 152812, "urlhaus_id": "3943560", "url": "https://raw.githubusercontent.com/rushangchandekar/ArogyaMitti/main/frontend/plugins/health-check/Arogya_Mitti_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:24 UTC", "discovered_at": "2026-10-06T09:34:24.000Z" }, { "id": 152811, "urlhaus_id": "3943561", "url": "https://github.com/elnatnael/Project_hilltops/raw/refs/heads/main/Backend/node_modules/bytes/Project-hilltops-discretely.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:24 UTC", "discovered_at": "2026-10-06T09:34:24.000Z" }, { "id": 152810, "urlhaus_id": "3943562", "url": "https://raw.githubusercontent.com/privatebugcorp/ConveyorBelt-mqtt/main/Venv/templates/mqtt_Belt_Conveyor_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:24 UTC", "discovered_at": "2026-10-06T09:34:24.000Z" }, { "id": 152809, "urlhaus_id": "3943563", "url": "https://github.com/tharun27102006/city-guide/raw/refs/heads/main/endocarpal/guide-city-v2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:24 UTC", "discovered_at": "2026-10-06T09:34:24.000Z" }, { "id": 152816, "urlhaus_id": "3943556", "url": "https://raw.githubusercontent.com/youssef13312313/3DFIAI/master/app/api/status/DFIAI_v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:22 UTC", "discovered_at": "2026-10-06T09:34:22.000Z" }, { "id": 152815, "urlhaus_id": "3943557", "url": "https://raw.githubusercontent.com/qcmp34/qcmp34/main/hyperuresis/qcmp_v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:22 UTC", "discovered_at": "2026-10-06T09:34:22.000Z" }, { "id": 152814, "urlhaus_id": "3943558", "url": "https://github.com/Abdullah3122004/Food-Receipe-web/raw/refs/heads/main/public/web-Food-Receipe-v3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:22 UTC", "discovered_at": "2026-10-06T09:34:22.000Z" }, { "id": 152813, "urlhaus_id": "3943559", "url": "https://github.com/MAXPLAIZIN/valinor-os/releases/download/v2.0/Release_x64.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:22 UTC", "discovered_at": "2026-10-06T09:34:22.000Z" }, { "id": 152819, "urlhaus_id": "3943553", "url": "https://raw.githubusercontent.com/Carlrevive/Syntecxhub_Project_Name2/main/cinenchyma/Name-Project-Syntecxhub-1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:21 UTC", "discovered_at": "2026-10-06T09:34:21.000Z" }, { "id": 152818, "urlhaus_id": "3943554", "url": "https://raw.githubusercontent.com/p-surya/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V5/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V5_Main-dev/OldVersions/MAKEFILE/1/1-100/Motor-Archive-Images-Seans-World-Factory-Life-Car-1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:21 UTC", "discovered_at": "2026-10-06T09:34:21.000Z" }, { "id": 152817, "urlhaus_id": "3943555", "url": "https://raw.githubusercontent.com/thaunghtikeyangon/Bulk-Image-Downloader-Update/main/Graphium/Bulk-Update-Downloader-Image-prededuction.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:21 UTC", "discovered_at": "2026-10-06T09:34:21.000Z" }, { "id": 152820, "urlhaus_id": "3943552", "url": "https://raw.githubusercontent.com/Edwinramirezgon/biblioteca-digital-clean-architecture/main/docs/c4-model/architecture-clean-biblioteca-digital-2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:34:17 UTC", "discovered_at": "2026-10-06T09:34:17.000Z" }, { "id": 152822, "urlhaus_id": "3943550", "url": "https://github.com/t2frmdam22/assert-is-equal-uint8clampedarray/raw/refs/heads/main/test/is-uint-equal-clampedarray-assert-v2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:54 UTC", "discovered_at": "2026-10-06T09:22:54.000Z" }, { "id": 152821, "urlhaus_id": "3943551", "url": "https://github.com/Yusheno/stellaris-galaxy-toolbox/raw/refs/heads/branch/rankness/stellaris-galaxy-toolbox-v2.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:54 UTC", "discovered_at": "2026-10-06T09:22:54.000Z" }, { "id": 152827, "urlhaus_id": "3943545", "url": "https://raw.githubusercontent.com/ngotrunganhh/ddoslor/main/utils/Software_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:51 UTC", "discovered_at": "2026-10-06T09:22:51.000Z" }, { "id": 152826, "urlhaus_id": "3943546", "url": "https://raw.githubusercontent.com/lamaSonmez/angular-factory-pattern-demo/main/src/app/furniture-product/factory-demo-angular-pattern-2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:51 UTC", "discovered_at": "2026-10-06T09:22:51.000Z" }, { "id": 152825, "urlhaus_id": "3943547", "url": "https://raw.githubusercontent.com/SAM3166/Open-Sora/main/opensora/models/hunyuan_vae/Sora_Open_v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:51 UTC", "discovered_at": "2026-10-06T09:22:51.000Z" }, { "id": 152824, "urlhaus_id": "3943548", "url": "https://raw.githubusercontent.com/Gabrielyop50/GabrielPorque/master/temp/video/Gabriel_Porque_v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:51 UTC", "discovered_at": "2026-10-06T09:22:51.000Z" }, { "id": 152823, "urlhaus_id": "3943549", "url": "https://raw.githubusercontent.com/rijackkson/trello-clone/master/app/clone_trello_v1.8-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:51 UTC", "discovered_at": "2026-10-06T09:22:51.000Z" }, { "id": 152828, "urlhaus_id": "3943544", "url": "https://raw.githubusercontent.com/ShreenandNaik/phantom-forces-script-hub/branch/earpick/hub-script-forces-phantom-2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:44 UTC", "discovered_at": "2026-10-06T09:22:44.000Z" }, { "id": 152832, "urlhaus_id": "3943540", "url": "https://github.com/Suman1214129/Next-JS/raw/refs/heads/main/src/app/JS-Next-v3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:43 UTC", "discovered_at": "2026-10-06T09:22:43.000Z" }, { "id": 152831, "urlhaus_id": "3943541", "url": "https://github.com/elnatnael/alx_travel_app/raw/refs/heads/main/alx_travel_app/alx_travel_app/travel-app-alx-2.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:43 UTC", "discovered_at": "2026-10-06T09:22:43.000Z" }, { "id": 152830, "urlhaus_id": "3943542", "url": "https://github.com/Deedass/Werewolf-Whatsapp-Bot/raw/refs/heads/main/media/Bot_Werewolf_Whatsapp_v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:43 UTC", "discovered_at": "2026-10-06T09:22:43.000Z" }, { "id": 152829, "urlhaus_id": "3943543", "url": "https://raw.githubusercontent.com/LeboMeje/Fix-my-code/master/0x00-challenge/4-delete_dnodeint/my-Fix-code-v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:43 UTC", "discovered_at": "2026-10-06T09:22:43.000Z" }, { "id": 152834, "urlhaus_id": "3943538", "url": "https://raw.githubusercontent.com/cfdgh3231/Knoppix-Os-installation/main/carotic/Os-Knoppix-installation-romanticalness.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:41 UTC", "discovered_at": "2026-10-06T09:22:41.000Z" }, { "id": 152833, "urlhaus_id": "3943539", "url": "https://raw.githubusercontent.com/GhadaHafez9/SoftMicro_Drapes_XD_Docs/SoftMicro_Drapes_XD_Docs_Main-dev/OldVersions/CREDITS/English/Soft-X-Micro-Docs-Drapes-2.3-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:41 UTC", "discovered_at": "2026-10-06T09:22:41.000Z" }, { "id": 152837, "urlhaus_id": "3943535", "url": "https://github.com/MubeenStudio/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V8/raw/refs/heads/SeansLifeArchive_Images_MotorWorld_CarFactory_Y2025_V8_Main-dev/OldVersions/GITATTRIBUTES/World_Life_Motor_Car_Archive_Images_Seans_Factory_undesiredly.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:40 UTC", "discovered_at": "2026-10-06T09:22:40.000Z" }, { "id": 152836, "urlhaus_id": "3943536", "url": "https://github.com/AngellyR/Fotograf-a-de-plantas/raw/refs/heads/main/parrock/de_a_Fotograf_plantas_2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:40 UTC", "discovered_at": "2026-10-06T09:22:40.000Z" }, { "id": 152835, "urlhaus_id": "3943537", "url": "https://github.com/Mehul-Rathva/Flutter-based-Loyalty-Card-Storage-App/raw/refs/heads/main/macos/Runner.xcodeproj/xcshareddata/based_Loyalty_Card_App_Flutter_Storage_2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:40 UTC", "discovered_at": "2026-10-06T09:22:40.000Z" }, { "id": 152838, "urlhaus_id": "3943534", "url": "https://github.com/sajidirnd/symfony-structured-mapper-bundle/raw/refs/heads/main/src/structured-mapper-symfony-bundle-v3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:39 UTC", "discovered_at": "2026-10-06T09:22:39.000Z" }, { "id": 152841, "urlhaus_id": "3943531", "url": "https://github.com/UTKA-SINGH/OLP-project/raw/refs/heads/main/node_modules/diff-sequences/build/OL_project_3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:36 UTC", "discovered_at": "2026-10-06T09:22:36.000Z" }, { "id": 152840, "urlhaus_id": "3943532", "url": "https://github.com/VERANDHAR073/Raspberrypi-cloud-server/raw/refs/heads/main/isonym/cloud-Raspberrypi-server-1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:36 UTC", "discovered_at": "2026-10-06T09:22:36.000Z" }, { "id": 152839, "urlhaus_id": "3943533", "url": "https://raw.githubusercontent.com/Subhasajib/SeleniumPom/main/src/main/resources/Pom-Selenium-v3.1-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:36 UTC", "discovered_at": "2026-10-06T09:22:36.000Z" }, { "id": 152845, "urlhaus_id": "3943527", "url": "https://github.com/AlfieIdiot/Dither/raw/refs/heads/main/lib/Software_1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:35 UTC", "discovered_at": "2026-10-06T09:22:35.000Z" }, { "id": 152844, "urlhaus_id": "3943528", "url": "https://github.com/teox1211/practical-ai-agents/raw/refs/heads/main/holcad/ai_agents_practical_vermix.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:35 UTC", "discovered_at": "2026-10-06T09:22:35.000Z" }, { "id": 152843, "urlhaus_id": "3943529", "url": "https://github.com/ryuk956983/weather-info/raw/refs/heads/main/src/Components/Loader/weather-info-v2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:35 UTC", "discovered_at": "2026-10-06T09:22:35.000Z" }, { "id": 152842, "urlhaus_id": "3943530", "url": "https://github.com/RodrigoDevBnu/inputFile/raw/refs/heads/main/banjorine/File-input-1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:35 UTC", "discovered_at": "2026-10-06T09:22:35.000Z" }, { "id": 152857, "urlhaus_id": "3943515", "url": "https://raw.githubusercontent.com/lordnanok/Free-CRM/main/torsoocclusion/Free_CRM_v1.6-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152856, "urlhaus_id": "3943516", "url": "https://github.com/arthurfreitas15/Easy-Shopping/raw/refs/heads/master/img/Shopping-Easy-2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152855, "urlhaus_id": "3943517", "url": "https://github.com/Priyamthapa/Twitter-Username-Sniper/raw/refs/heads/main/ventilagin/Twitter_Username_Sniper_1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152854, "urlhaus_id": "3943518", "url": "https://github.com/Trendiva/SecuriScan/raw/refs/heads/main/assets/images/Securi_Scan_2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152853, "urlhaus_id": "3943519", "url": "https://github.com/haryad404/Atlantis-Executor/raw/refs/heads/master/packages/template/src/Atlantis_Executor_v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152852, "urlhaus_id": "3943520", "url": "https://github.com/lamaSonmez/debounce-thrttole-demo/raw/refs/heads/main/src/app/demos-wrapper/debounce_demo_thrttole_v1.0-alpha.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152851, "urlhaus_id": "3943521", "url": "https://raw.githubusercontent.com/Shaurya1456/Shaurya1456/main/necroscopy/Shaurya-2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152850, "urlhaus_id": "3943522", "url": "https://raw.githubusercontent.com/PureLmnz/adviceGenerator/main/adviceGenerator/advice-generator-app-main/design/Generator-advice-spermatovum.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152849, "urlhaus_id": "3943523", "url": "https://raw.githubusercontent.com/RicardoQts/documint/main/templates/Software_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152848, "urlhaus_id": "3943524", "url": "https://raw.githubusercontent.com/tiktokfnf33/Rayleigh-Taylor-Instability-Simulation/main/zenithward/Rayleigh-Taylor-Simulation-Instability-v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152847, "urlhaus_id": "3943525", "url": "https://raw.githubusercontent.com/snehilhbtu/navbarprovideren-master/main/android/app/src/profile/navbarprovideren-master-v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152846, "urlhaus_id": "3943526", "url": "https://raw.githubusercontent.com/hgautam524/Face-It/main/__pycache__/Face_It_v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:34 UTC", "discovered_at": "2026-10-06T09:22:34.000Z" }, { "id": 152863, "urlhaus_id": "3943509", "url": "https://raw.githubusercontent.com/danendrafau/ecommerce-dataset/main/data/dataset-ecommerce-v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:33 UTC", "discovered_at": "2026-10-06T09:22:33.000Z" }, { "id": 152862, "urlhaus_id": "3943510", "url": "https://github.com/code-iddih/C-Test-Solutions/raw/refs/heads/master/ContactsApp/bin/Test_Solutions_v2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:33 UTC", "discovered_at": "2026-10-06T09:22:33.000Z" }, { "id": 152861, "urlhaus_id": "3943511", "url": "https://github.com/MnD35/MnD35.github.io/raw/refs/heads/main/henpeck/github-io-Mn-v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:33 UTC", "discovered_at": "2026-10-06T09:22:33.000Z" }, { "id": 152860, "urlhaus_id": "3943512", "url": "https://github.com/jhosmar1/Practica5-Dao/raw/refs/heads/master/src/java/com/emergentes/modelo/Dao-Practica-v2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:33 UTC", "discovered_at": "2026-10-06T09:22:33.000Z" }, { "id": 152859, "urlhaus_id": "3943513", "url": "https://raw.githubusercontent.com/otiego/otiego/main/Ropen-Android-Application-main/app/src/main/res/mipmap-anydpi-v26/Software_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:33 UTC", "discovered_at": "2026-10-06T09:22:33.000Z" }, { "id": 152858, "urlhaus_id": "3943514", "url": "http://180.188.142.1:5603/i", "host": "180.188.142.1", "host_ip": "180.188.142.1", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-06 09:22:33 UTC", "discovered_at": "2026-10-06T09:22:33.000Z" }, { "id": 152864, "urlhaus_id": "3943508", "url": "https://raw.githubusercontent.com/XDuch/aztec-network/main/neglectfully/aztec_network_1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:30 UTC", "discovered_at": "2026-10-06T09:22:30.000Z" }, { "id": 152867, "urlhaus_id": "3943505", "url": "https://raw.githubusercontent.com/Tonynikolaevc/SNU_2D_ProgrammingTools_IDE_WGet-Config/SNU_2D_ProgrammingTools_IDE_WGet-Config_Main-dev/RepoData/Description/GitHub/Get-W-Config-Programming-Tools-ID-SN-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:22 UTC", "discovered_at": "2026-10-06T09:22:22.000Z" }, { "id": 152866, "urlhaus_id": "3943506", "url": "https://raw.githubusercontent.com/iftekharul01/Restaurant-Management-System-in-Python/main/Buxbaumia/Python_Restaurant_in_System_Management_v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:22 UTC", "discovered_at": "2026-10-06T09:22:22.000Z" }, { "id": 152865, "urlhaus_id": "3943507", "url": "https://raw.githubusercontent.com/Adzikpeli/e_levy_checker/master/android/app/src/profile/checker-e-levy-v3.6-alpha.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:22 UTC", "discovered_at": "2026-10-06T09:22:22.000Z" }, { "id": 152869, "urlhaus_id": "3943503", "url": "https://raw.githubusercontent.com/Gabrielyop50/Gabrielit/master/stik/Software_v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:21 UTC", "discovered_at": "2026-10-06T09:22:21.000Z" }, { "id": 152868, "urlhaus_id": "3943504", "url": "https://raw.githubusercontent.com/canlaspaulkristian/PicSpider/master/templates/Spider-Pic-v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:21 UTC", "discovered_at": "2026-10-06T09:22:21.000Z" }, { "id": 152871, "urlhaus_id": "3943501", "url": "https://raw.githubusercontent.com/DevangGentyal/brand-deals-ai/main/postscapular/brand-deals-ai.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:20 UTC", "discovered_at": "2026-10-06T09:22:20.000Z" }, { "id": 152870, "urlhaus_id": "3943502", "url": "https://raw.githubusercontent.com/aayushv2003/BlogIT-App/main/wirework/BlogIT-App.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:20 UTC", "discovered_at": "2026-10-06T09:22:20.000Z" }, { "id": 152883, "urlhaus_id": "3943489", "url": "https://github.com/uxno/PRODIGY_WD_02/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152882, "urlhaus_id": "3943490", "url": "https://github.com/ankitkumar10021/genai-security-agent-capstone-2025/raw/refs/heads/main/Notebook/agent-genai-security-capstone-v3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152881, "urlhaus_id": "3943491", "url": "https://github.com/LiehSt/Streaming-Avatar/raw/refs/heads/main/react-avatar-app/utils/Streaming_Avatar_1.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152880, "urlhaus_id": "3943492", "url": "https://raw.githubusercontent.com/Gouravdhiman8815/cyber-lab/main/day1/cyber-lab-v3.0-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152879, "urlhaus_id": "3943493", "url": "https://raw.githubusercontent.com/GarotoQualquer/Transcribee/main/Sumatra/Software_3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152878, "urlhaus_id": "3943494", "url": "https://raw.githubusercontent.com/abdalrhmanmohnya/flutter/master/android/app/src/main/java/com/Software_v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152877, "urlhaus_id": "3943495", "url": "https://raw.githubusercontent.com/Chuckaballe60/GoShoe/main/Images/Shoe_Go_v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152876, "urlhaus_id": "3943496", "url": "https://github.com/guiqmaia/micro_app_home/raw/refs/heads/main/test/micro_home_app_1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152875, "urlhaus_id": "3943497", "url": "https://github.com/Jacksonsmg/SoftwareTesting-Cunit/raw/refs/heads/main/atheistically/Software-Testing-Cunit-v2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152874, "urlhaus_id": "3943498", "url": "https://github.com/kenttt1/smp25519-typescript/raw/refs/heads/main/hardness/typescript-smp-1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152873, "urlhaus_id": "3943499", "url": "https://github.com/everleiton/MusicSocial/raw/refs/heads/master/application/Social-Music-1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152872, "urlhaus_id": "3943500", "url": "https://raw.githubusercontent.com/vuongkiranocode2004/ai-blog-poster/main/app/services/poster-ai-blog-v1.4-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:19 UTC", "discovered_at": "2026-10-06T09:22:19.000Z" }, { "id": 152884, "urlhaus_id": "3943488", "url": "https://raw.githubusercontent.com/PureLmnz/PureLmnz/main/corbie/Lmnz_Pure_Calathea.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:18 UTC", "discovered_at": "2026-10-06T09:22:18.000Z" }, { "id": 152896, "urlhaus_id": "3943476", "url": "https://github.com/guiqmaia/micro_app_stocks/raw/refs/heads/main/lib/app/infra/dtos/stocks_app_micro_1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152895, "urlhaus_id": "3943477", "url": "https://github.com/Privatedocs-1/KotJWT/raw/refs/heads/main/paranucleinic/JWT-Kot-3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152894, "urlhaus_id": "3943478", "url": "https://github.com/LeboMeje/simple_shell/raw/refs/heads/master/starringly/shell_simple_3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152893, "urlhaus_id": "3943479", "url": "https://github.com/LeboMeje/AirBnB_clone/raw/refs/heads/main/tests/test_models/clone_Bn_Air_v1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152892, "urlhaus_id": "3943480", "url": "https://github.com/AshishParulekar/CI_checking-/raw/refs/heads/main/references/checking_C_1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152891, "urlhaus_id": "3943481", "url": "https://github.com/555tlc/stellar-party-toolkit/raw/refs/heads/branch/harlequinic/stellar_party_toolkit_2.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152890, "urlhaus_id": "3943482", "url": "https://github.com/Gabrielyop50/Gabrielito/raw/refs/heads/master/src/Software_1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152889, "urlhaus_id": "3943483", "url": "https://github.com/guiqmaia/micro_core/raw/refs/heads/main/lib/micro_core_2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152888, "urlhaus_id": "3943484", "url": "https://raw.githubusercontent.com/diego707/transaction-st/main/fuchsinophilous/st-transaction-2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152887, "urlhaus_id": "3943485", "url": "https://github.com/jhosmar1/Practicas-4/raw/refs/heads/master/web/img/Practicas_unpredictedness.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152886, "urlhaus_id": "3943486", "url": "https://github.com/Abrockyt/robotic-arm/raw/refs/heads/main/src/med_robot_description/launch/arm_robotic_1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152885, "urlhaus_id": "3943487", "url": "https://raw.githubusercontent.com/malcolmne/reanimated-sparkles/main/keratinose/reanimated_sparkles_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:17 UTC", "discovered_at": "2026-10-06T09:22:17.000Z" }, { "id": 152897, "urlhaus_id": "3943475", "url": "https://github.com/DUXXOFF/Bliss_Browser_Luau/raw/refs/heads/main/unceilinged/Luau_Browser_Bliss_1.6-alpha.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:16 UTC", "discovered_at": "2026-10-06T09:22:16.000Z" }, { "id": 152901, "urlhaus_id": "3943471", "url": "http://123.12.161.221:43385/i", "host": "123.12.161.221", "host_ip": "123.12.161.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-06 09:22:15 UTC", "discovered_at": "2026-10-06T09:22:15.000Z" }, { "id": 152900, "urlhaus_id": "3943472", "url": "https://github.com/lamaSonmez/boraq-testproject/raw/refs/heads/master/src/assets/sass/testproject-boraq-3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:15 UTC", "discovered_at": "2026-10-06T09:22:15.000Z" }, { "id": 152899, "urlhaus_id": "3943473", "url": "https://github.com/ahmjo/E-commerce/raw/refs/heads/main/src/assets/commerce_2.8-beta.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:15 UTC", "discovered_at": "2026-10-06T09:22:15.000Z" }, { "id": 152898, "urlhaus_id": "3943474", "url": "https://github.com/ayusha-bit/Internship-project/raw/refs/heads/main/outfiction/Internship_project_3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:15 UTC", "discovered_at": "2026-10-06T09:22:15.000Z" }, { "id": 152902, "urlhaus_id": "3943470", "url": "https://raw.githubusercontent.com/Arslan97/Audio-Equalizer-/main/radiotelegraphy/Audio_Equalizer_3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:22:13 UTC", "discovered_at": "2026-10-06T09:22:13.000Z" }, { "id": 152903, "urlhaus_id": "3943469", "url": "https://github.com/Julyanae/project-manager/raw/refs/heads/master/projectmanager/src/manager_project_v3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:58 UTC", "discovered_at": "2026-10-06T09:21:58.000Z" }, { "id": 152909, "urlhaus_id": "3943463", "url": "https://github.com/bou3lem/Terminal_Programs/raw/refs/heads/main/Suriana/Terminal-Programs-v2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:57 UTC", "discovered_at": "2026-10-06T09:21:57.000Z" }, { "id": 152908, "urlhaus_id": "3943464", "url": "https://github.com/CyberGeek42/DxO-PhotoLab-Free/raw/refs/heads/main/phorometric/Dx_Photo_Free_Lab_1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:57 UTC", "discovered_at": "2026-10-06T09:21:57.000Z" }, { "id": 152907, "urlhaus_id": "3943465", "url": "https://raw.githubusercontent.com/Mehul-Rathva/ETHERUM-ERC-20-TOKEN-MAIN/main/node_modules/immutable/TOKE-ER-ETHERU-MAIN-1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:57 UTC", "discovered_at": "2026-10-06T09:21:57.000Z" }, { "id": 152906, "urlhaus_id": "3943466", "url": "https://raw.githubusercontent.com/Abdullah3122004/Frontend-final-hackathon/main/src/routes/hackathon_Frontend_final_v1.2-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:57 UTC", "discovered_at": "2026-10-06T09:21:57.000Z" }, { "id": 152905, "urlhaus_id": "3943467", "url": "https://raw.githubusercontent.com/UTKA-SINGH/MyApp/main/node_modules/schema-utils/node_modules/json-schema-traverse/spec/App_My_3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:57 UTC", "discovered_at": "2026-10-06T09:21:57.000Z" }, { "id": 152904, "urlhaus_id": "3943468", "url": "https://raw.githubusercontent.com/Phinee/pixel-gun-3d-custom-menu/branch/illguide/d_menu_pixel_gun_custom_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:57 UTC", "discovered_at": "2026-10-06T09:21:57.000Z" }, { "id": 152911, "urlhaus_id": "3943461", "url": "https://github.com/arthurfreitas15/ConversorMoeda/raw/refs/heads/master/assets/img/Moeda_Conversor_2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:56 UTC", "discovered_at": "2026-10-06T09:21:56.000Z" }, { "id": 152910, "urlhaus_id": "3943462", "url": "https://github.com/Hill-Sudani/BarCode-Scanner/raw/refs/heads/main/assets/Code_Scanner_Bar_v2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:56 UTC", "discovered_at": "2026-10-06T09:21:56.000Z" }, { "id": 152914, "urlhaus_id": "3943458", "url": "https://raw.githubusercontent.com/prasdionaditya/SiPaling-Paham/main/analisis-materi-kuliah/utils/__pycache__/Si-Paham-Paling-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:47 UTC", "discovered_at": "2026-10-06T09:21:47.000Z" }, { "id": 152913, "urlhaus_id": "3943459", "url": "https://raw.githubusercontent.com/Jaemsyien-Devgan/toko/main/talking/toko.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:47 UTC", "discovered_at": "2026-10-06T09:21:47.000Z" }, { "id": 152912, "urlhaus_id": "3943460", "url": "https://raw.githubusercontent.com/Gajendrakmt9079/Chaiwala-React-native/main/android/app/src/main/java/React_Chaiwala_native_v1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:47 UTC", "discovered_at": "2026-10-06T09:21:47.000Z" }, { "id": 152917, "urlhaus_id": "3943455", "url": "https://raw.githubusercontent.com/shimulkhanrs99/fthdt/main/blee/Software_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:46 UTC", "discovered_at": "2026-10-06T09:21:46.000Z" }, { "id": 152916, "urlhaus_id": "3943456", "url": "https://raw.githubusercontent.com/Coderkreet/brainrot-script-collector-roblox/branch/adventual/collector-brainrot-script-roblox-1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:46 UTC", "discovered_at": "2026-10-06T09:21:46.000Z" }, { "id": 152915, "urlhaus_id": "3943457", "url": "https://raw.githubusercontent.com/amoosghori/awesome-effect/main/images/effect-awesome-1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:46 UTC", "discovered_at": "2026-10-06T09:21:46.000Z" }, { "id": 152923, "urlhaus_id": "3943449", "url": "https://raw.githubusercontent.com/dotcms19/PathOfBuilding-PoE2-v2/main/anthryl/v_Building_Po_Of_Path_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:44 UTC", "discovered_at": "2026-10-06T09:21:44.000Z" }, { "id": 152922, "urlhaus_id": "3943450", "url": "https://github.com/john312s/oh-my-zshrc/raw/refs/heads/main/presets/my_zshrc_oh_v1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:44 UTC", "discovered_at": "2026-10-06T09:21:44.000Z" }, { "id": 152921, "urlhaus_id": "3943451", "url": "https://github.com/pradanadhyaksa/finance-totadvi/raw/refs/heads/main/client/build/static/media/finance-totadvi-everbloomer.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:44 UTC", "discovered_at": "2026-10-06T09:21:44.000Z" }, { "id": 152920, "urlhaus_id": "3943452", "url": "https://raw.githubusercontent.com/irfanmaulana17/Counting_Vechile_Plat_Recognition/main/unsilvered/Counting_Vechile_Plat_Recognition.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:44 UTC", "discovered_at": "2026-10-06T09:21:44.000Z" }, { "id": 152919, "urlhaus_id": "3943453", "url": "https://raw.githubusercontent.com/lamaSonmez/leetcode-problems/master/src/environments/problems-leetcode-v3.1-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:44 UTC", "discovered_at": "2026-10-06T09:21:44.000Z" }, { "id": 152918, "urlhaus_id": "3943454", "url": "https://raw.githubusercontent.com/trololollo78/atlas-2023/master/web/atlas-v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:44 UTC", "discovered_at": "2026-10-06T09:21:44.000Z" }, { "id": 152929, "urlhaus_id": "3943443", "url": "https://github.com/arthurfreitas15/Wide-Coverage/raw/refs/heads/main/img/Wide-Coverage-v2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:43 UTC", "discovered_at": "2026-10-06T09:21:43.000Z" }, { "id": 152928, "urlhaus_id": "3943444", "url": "https://github.com/Mehul-Rathva/ID-Card-Generator/raw/refs/heads/main/android/app/src/main/res/mipmap-xxxhdpi/Generator-I-Card-lubber.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:43 UTC", "discovered_at": "2026-10-06T09:21:43.000Z" }, { "id": 152927, "urlhaus_id": "3943445", "url": "https://raw.githubusercontent.com/code-iddih/code-iddih-task-end-of-phase-03-project-MOBI-Services/master/mobi_services/migrations/task_MOB_iddih_of_Services_phase_project_end_code_cronet.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:43 UTC", "discovered_at": "2026-10-06T09:21:43.000Z" }, { "id": 152926, "urlhaus_id": "3943446", "url": "https://github.com/dohehe29/Projects-Based-on-Atmage32/raw/refs/heads/main/epicurishly/on-Based-Projects-Atmage-hydrophoby.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:43 UTC", "discovered_at": "2026-10-06T09:21:43.000Z" }, { "id": 152925, "urlhaus_id": "3943447", "url": "https://raw.githubusercontent.com/E-Kitten/Roblox-Friend-Remover/main/_posts/Remover-Roblox-Friend-1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:43 UTC", "discovered_at": "2026-10-06T09:21:43.000Z" }, { "id": 152924, "urlhaus_id": "3943448", "url": "https://github.com/Hill-Sudani/Make-Your-Own-Game-2/raw/refs/heads/main/IMAGES/Your-Make-Own-Game-v3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:43 UTC", "discovered_at": "2026-10-06T09:21:43.000Z" }, { "id": 152932, "urlhaus_id": "3943440", "url": "https://github.com/DAMA342/RevokeMsgPatcher/raw/refs/heads/master/RevokeMsgPatcher/Properties/Patcher_Msg_Revoke_v3.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:42 UTC", "discovered_at": "2026-10-06T09:21:42.000Z" }, { "id": 152931, "urlhaus_id": "3943441", "url": "https://github.com/MaoDeew/fitnet-react/raw/refs/heads/master/src/store/actions/fitnet_react_v1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:42 UTC", "discovered_at": "2026-10-06T09:21:42.000Z" }, { "id": 152930, "urlhaus_id": "3943442", "url": "https://raw.githubusercontent.com/reol9/hoi4-dlc-unlocker-suite/branch/monoculate/dlc_hoi_unlocker_suite_v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:42 UTC", "discovered_at": "2026-10-06T09:21:42.000Z" }, { "id": 152934, "urlhaus_id": "3943438", "url": "https://github.com/NoelHuwae/keep-ups/raw/refs/heads/main/.vscode/keep_ups_chondroendothelioma.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:41 UTC", "discovered_at": "2026-10-06T09:21:41.000Z" }, { "id": 152933, "urlhaus_id": "3943439", "url": "https://raw.githubusercontent.com/PassakornMeema/project-10/main/app/Providers/project-1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:41 UTC", "discovered_at": "2026-10-06T09:21:41.000Z" }, { "id": 152935, "urlhaus_id": "3943437", "url": "https://github.com/AT-u/self-hosted/raw/refs/heads/main/chalklike/hosted_self_3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:40 UTC", "discovered_at": "2026-10-06T09:21:40.000Z" }, { "id": 152938, "urlhaus_id": "3943434", "url": "https://github.com/soumiau158/ProdSense/raw/refs/heads/main/.devcontainer/Prod_Sense_v1.1-beta.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:39 UTC", "discovered_at": "2026-10-06T09:21:39.000Z" }, { "id": 152937, "urlhaus_id": "3943435", "url": "https://github.com/Feb999/gradient-network-bot-lab/raw/refs/heads/branch/uncrinkle/gradient_lab_network_bot_1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:39 UTC", "discovered_at": "2026-10-06T09:21:39.000Z" }, { "id": 152936, "urlhaus_id": "3943436", "url": "https://github.com/oliverkanda254/medusa-mobile-react-native/raw/refs/heads/main/android/app/src/main/res/drawable/medusa_mobile_native_react_2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:39 UTC", "discovered_at": "2026-10-06T09:21:39.000Z" }, { "id": 152939, "urlhaus_id": "3943433", "url": "https://raw.githubusercontent.com/anak4ta/wopt-demo/main/build/app/intermediates/incremental/mergeDebugResources/merged.dir/values-mk/wopt_demo_v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:37 UTC", "discovered_at": "2026-10-06T09:21:37.000Z" }, { "id": 152940, "urlhaus_id": "3943432", "url": "https://github.com/TajEmperor/DesktopIconTrayToggler/raw/refs/heads/main/resource/Tray-Toggler-Desktop-Icon-2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:34 UTC", "discovered_at": "2026-10-06T09:21:34.000Z" }, { "id": 152943, "urlhaus_id": "3943429", "url": "https://raw.githubusercontent.com/guiqmaia/cicd_github_actions/main/android/app/src/main/kotlin/com/example/cicd_github_actions/actions_cicd_github_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:33 UTC", "discovered_at": "2026-10-06T09:21:33.000Z" }, { "id": 152942, "urlhaus_id": "3943430", "url": "https://raw.githubusercontent.com/andi7555/kings-cricket-line/main/database/kings_line_cricket_3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:33 UTC", "discovered_at": "2026-10-06T09:21:33.000Z" }, { "id": 152941, "urlhaus_id": "3943431", "url": "https://raw.githubusercontent.com/Arno1/GalaxyS_Project/master/barangay/Project-Galaxy-v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:33 UTC", "discovered_at": "2026-10-06T09:21:33.000Z" }, { "id": 152944, "urlhaus_id": "3943428", "url": "https://raw.githubusercontent.com/firda0802/roy-smart-assistent/main/.idea/inspectionProfiles/smart_roy_assistent_3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:29 UTC", "discovered_at": "2026-10-06T09:21:29.000Z" }, { "id": 152945, "urlhaus_id": "3943427", "url": "https://github.com/Ghostrider0077/solid-tech-sdk/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:28 UTC", "discovered_at": "2026-10-06T09:21:28.000Z" }, { "id": 152946, "urlhaus_id": "3943426", "url": "https://raw.githubusercontent.com/knarzzz/blog-api/main/.github/api_blog_1.9-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:23 UTC", "discovered_at": "2026-10-06T09:21:23.000Z" }, { "id": 152947, "urlhaus_id": "3943425", "url": "https://github.com/gyf45/ai-engineer-interview-questions/raw/refs/heads/main/overprint/engineer_interview_ai_questions_v3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:22 UTC", "discovered_at": "2026-10-06T09:21:22.000Z" }, { "id": 152948, "urlhaus_id": "3943424", "url": "https://raw.githubusercontent.com/Sopida145/firstapi/master/test/firstapi-v1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:20 UTC", "discovered_at": "2026-10-06T09:21:20.000Z" }, { "id": 152950, "urlhaus_id": "3943422", "url": "https://github.com/Evanlum2011/CoinGecko/raw/refs/heads/main/src/Coin-Gecko-2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:19 UTC", "discovered_at": "2026-10-06T09:21:19.000Z" }, { "id": 152949, "urlhaus_id": "3943423", "url": "https://github.com/Tinoco2101/madden-nfl-25-pc-edition-share/raw/refs/heads/main/aubepine/edition_madden_share_pc_nfl_v3.0-alpha.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:19 UTC", "discovered_at": "2026-10-06T09:21:19.000Z" }, { "id": 152953, "urlhaus_id": "3943419", "url": "https://github.com/ITACHI1061/monorepo-starter/raw/refs/heads/master/apps/next-ready-stack/src/app/example/virtual/01-fixed-row/starter_monorepo_v3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:18 UTC", "discovered_at": "2026-10-06T09:21:18.000Z" }, { "id": 152952, "urlhaus_id": "3943420", "url": "https://raw.githubusercontent.com/thugyi/Project/main/resources/js/components/Software-1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:18 UTC", "discovered_at": "2026-10-06T09:21:18.000Z" }, { "id": 152951, "urlhaus_id": "3943421", "url": "https://raw.githubusercontent.com/ronny-gans/simpleFeatureSection/main/resources/simple-Section-Feature-3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:18 UTC", "discovered_at": "2026-10-06T09:21:18.000Z" }, { "id": 152955, "urlhaus_id": "3943417", "url": "https://raw.githubusercontent.com/NjySkan/renumber-files-macro/main/coastwards/renumber_macro_files_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:17 UTC", "discovered_at": "2026-10-06T09:21:17.000Z" }, { "id": 152954, "urlhaus_id": "3943418", "url": "https://github.com/Miqman/expressjs-postgres/raw/refs/heads/main/src/expressjs_postgres_1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:17 UTC", "discovered_at": "2026-10-06T09:21:17.000Z" }, { "id": 152956, "urlhaus_id": "3943416", "url": "https://github.com/juant2018/Dolphin-Anty-Stealth-Web-Automation/raw/refs/heads/main/palmister/Stealth-Anty-Automation-Web-Dolphin-3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:16 UTC", "discovered_at": "2026-10-06T09:21:16.000Z" }, { "id": 152958, "urlhaus_id": "3943414", "url": "https://raw.githubusercontent.com/elazharikhadija/SoftMicro_Drapes_7x/SoftMicro_Drapes_7x_Main-dev/RepoData/Description/GitHub/Drapes-x-Micro-Soft-3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:15 UTC", "discovered_at": "2026-10-06T09:21:15.000Z" }, { "id": 152957, "urlhaus_id": "3943415", "url": "https://raw.githubusercontent.com/maduwanthasathsara0-hub/abc/main/.github/Software-v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:15 UTC", "discovered_at": "2026-10-06T09:21:15.000Z" }, { "id": 152959, "urlhaus_id": "3943413", "url": "https://github.com/dillanserrano/palworld-mod-toolkit/raw/refs/heads/branch/huaco/toolkit-mod-palworld-v3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:14 UTC", "discovered_at": "2026-10-06T09:21:14.000Z" }, { "id": 152960, "urlhaus_id": "3943412", "url": "https://raw.githubusercontent.com/Habib255/lucky-one--choose-tour-place-randomly/main/src/components/randomly-lucky-place-one-choose-tour-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:13 UTC", "discovered_at": "2026-10-06T09:21:13.000Z" }, { "id": 152963, "urlhaus_id": "3943409", "url": "https://github.com/HORNOTZ/firebase-phone-auth/raw/refs/heads/master/semifailure/firebase-phone-auth-oppositipinnate.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:12 UTC", "discovered_at": "2026-10-06T09:21:12.000Z" }, { "id": 152962, "urlhaus_id": "3943410", "url": "https://github.com/CHarlieMagar/6thsem-project/raw/refs/heads/main/components/project_thsem_3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:12 UTC", "discovered_at": "2026-10-06T09:21:12.000Z" }, { "id": 152961, "urlhaus_id": "3943411", "url": "https://github.com/Bannanes123/obamify/raw/refs/heads/main/src/calculate/Software-1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:12 UTC", "discovered_at": "2026-10-06T09:21:12.000Z" }, { "id": 152966, "urlhaus_id": "3943406", "url": "https://github.com/matute50/mobiles-saladillovivo/raw/refs/heads/main/src/app/api/weather/saladillovivo-mobiles-v2.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:09 UTC", "discovered_at": "2026-10-06T09:21:09.000Z" }, { "id": 152965, "urlhaus_id": "3943407", "url": "https://github.com/Oznake/Awesome-LLM-reasoning-papers/raw/refs/heads/main/assets/Awesome-reasoning-LL-papers-v2.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:09 UTC", "discovered_at": "2026-10-06T09:21:09.000Z" }, { "id": 152964, "urlhaus_id": "3943408", "url": "https://github.com/QuestChillz/Expanding-the-Root-Partition-for-OpenWrt-on-Raspberry-Pi/raw/refs/heads/main/bardo/Wrt-Open-Pi-Raspberry-Expanding-on-the-Root-for-Partition-2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:09 UTC", "discovered_at": "2026-10-06T09:21:09.000Z" }, { "id": 152967, "urlhaus_id": "3943405", "url": "https://github.com/Carlrevive/PokeDex-Project/raw/refs/heads/main/intracorpuscular/Project_Dex_Poke_v3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:08 UTC", "discovered_at": "2026-10-06T09:21:08.000Z" }, { "id": 152968, "urlhaus_id": "3943404", "url": "https://github.com/Deadpegazus/cryptoguardian-cg/raw/refs/heads/main/unmaidenliness/cryptoguardian_cg_equidistantly.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:06 UTC", "discovered_at": "2026-10-06T09:21:06.000Z" }, { "id": 152970, "urlhaus_id": "3943402", "url": "https://raw.githubusercontent.com/omkheni/my-portfolio/main/src/components/my_portfolio_v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:03 UTC", "discovered_at": "2026-10-06T09:21:03.000Z" }, { "id": 152969, "urlhaus_id": "3943403", "url": "https://raw.githubusercontent.com/Silas807/fentanyl.lua/main/offenselessly/lua-fentanyl-v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:03 UTC", "discovered_at": "2026-10-06T09:21:03.000Z" }, { "id": 152971, "urlhaus_id": "3943401", "url": "https://github.com/03Anmol/03Anmol/raw/refs/heads/main/tylosis/Anmol-1.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:21:02 UTC", "discovered_at": "2026-10-06T09:21:02.000Z" }, { "id": 152972, "urlhaus_id": "3943400", "url": "https://github.com/03Anmol/YOLO_NAS_ON_CUSTOM_DATASET/raw/refs/heads/main/Ticuna/CUSTO-YOL-DATASET-O-NA-v3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:56 UTC", "discovered_at": "2026-10-06T09:20:56.000Z" }, { "id": 152973, "urlhaus_id": "3943399", "url": "https://raw.githubusercontent.com/strewerwer/albion-enhanced-mod-menu/branch/tussocker/enhanced-menu-albion-mod-v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:52 UTC", "discovered_at": "2026-10-06T09:20:52.000Z" }, { "id": 152974, "urlhaus_id": "3943398", "url": "https://github.com/loplopcatz/stock_simulator/raw/refs/heads/main/triturature/simulator-stock-v2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:47 UTC", "discovered_at": "2026-10-06T09:20:47.000Z" }, { "id": 152978, "urlhaus_id": "3943394", "url": "https://raw.githubusercontent.com/guiqmaia/micro_app_login/main/lib/micro_app_login_v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:42 UTC", "discovered_at": "2026-10-06T09:20:42.000Z" }, { "id": 152977, "urlhaus_id": "3943395", "url": "https://raw.githubusercontent.com/MarcoRamos016/Flutter/aula-20240812/android/app/src/main/res/values/Software_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:42 UTC", "discovered_at": "2026-10-06T09:20:42.000Z" }, { "id": 152976, "urlhaus_id": "3943396", "url": "https://raw.githubusercontent.com/Kfirm1208/train-frontend/main/dist/train-frontend-1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:42 UTC", "discovered_at": "2026-10-06T09:20:42.000Z" }, { "id": 152975, "urlhaus_id": "3943397", "url": "https://raw.githubusercontent.com/karan5530/poly-bridge-smart-solvers/branch/suprachorioidea/bridge_smart_poly_solvers_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:42 UTC", "discovered_at": "2026-10-06T09:20:42.000Z" }, { "id": 152982, "urlhaus_id": "3943390", "url": "https://raw.githubusercontent.com/yujongin/IdleGame/main/IdleGame/Assets/@Scripts/UI/Scene/Idle-Game-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:41 UTC", "discovered_at": "2026-10-06T09:20:41.000Z" }, { "id": 152981, "urlhaus_id": "3943391", "url": "https://github.com/gdhhgnbnvbn/f1-2025-ai-predict/raw/refs/heads/main/f1data/ai-f-predict-1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:41 UTC", "discovered_at": "2026-10-06T09:20:41.000Z" }, { "id": 152980, "urlhaus_id": "3943392", "url": "https://raw.githubusercontent.com/Karnchoudhary-99/Decentralized-quiz-competition./main/frontend/Software_v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:41 UTC", "discovered_at": "2026-10-06T09:20:41.000Z" }, { "id": 152979, "urlhaus_id": "3943393", "url": "https://raw.githubusercontent.com/clearn23/pyroki/main/src/pyroki/costs/Software-2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:41 UTC", "discovered_at": "2026-10-06T09:20:41.000Z" }, { "id": 152985, "urlhaus_id": "3943387", "url": "https://raw.githubusercontent.com/nishantsunuwar/assassins-creed-shadows-adult-enhancements/branch/messor/creed_assassins_shadows_enhancements_adult_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:40 UTC", "discovered_at": "2026-10-06T09:20:40.000Z" }, { "id": 152984, "urlhaus_id": "3943388", "url": "https://raw.githubusercontent.com/Peemkay/kayana/main/macos/Runner.xcworkspace/xcshareddata/Software-2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:40 UTC", "discovered_at": "2026-10-06T09:20:40.000Z" }, { "id": 152983, "urlhaus_id": "3943389", "url": "https://raw.githubusercontent.com/SAIFontop/edgemind-agent/main/src/core/edgemind-agent-v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:40 UTC", "discovered_at": "2026-10-06T09:20:40.000Z" }, { "id": 152987, "urlhaus_id": "3943385", "url": "https://raw.githubusercontent.com/BVNAHUSH/GHIBLI-ART-GENERATOR/main/transigence/AR-GHIBL-GENERATOR-v2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:38 UTC", "discovered_at": "2026-10-06T09:20:38.000Z" }, { "id": 152986, "urlhaus_id": "3943386", "url": "https://raw.githubusercontent.com/AnushkaPawar25/Anushka_Pawar/main/Sondergotter/Anushka-Pawar-2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:38 UTC", "discovered_at": "2026-10-06T09:20:38.000Z" }, { "id": 152994, "urlhaus_id": "3943378", "url": "https://raw.githubusercontent.com/otiego/node-express-course/master/saluter/express-node-course-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:37 UTC", "discovered_at": "2026-10-06T09:20:37.000Z" }, { "id": 152993, "urlhaus_id": "3943379", "url": "https://raw.githubusercontent.com/03Anmol/Faical_Recognation_system/main/ripsnorter/Recognation_system_Faical_2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:37 UTC", "discovered_at": "2026-10-06T09:20:37.000Z" }, { "id": 152992, "urlhaus_id": "3943380", "url": "https://github.com/saeed-karout/bike/raw/refs/heads/main/src/Software_3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:37 UTC", "discovered_at": "2026-10-06T09:20:37.000Z" }, { "id": 152991, "urlhaus_id": "3943381", "url": "https://github.com/Habib255/react-router-firebase/raw/refs/heads/main/src/components/Prouducts/router-firebase-react-v3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:37 UTC", "discovered_at": "2026-10-06T09:20:37.000Z" }, { "id": 152990, "urlhaus_id": "3943382", "url": "https://raw.githubusercontent.com/SattikMohanta/Green-Purchase-Behavior-of-Millennials-in-India/main/Micky/Green-in-Behavior-Millennials-India-of-Purchase-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:37 UTC", "discovered_at": "2026-10-06T09:20:37.000Z" }, { "id": 152989, "urlhaus_id": "3943383", "url": "https://raw.githubusercontent.com/ghost33333333/MyFinance_Management/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/My-Finance-Management-v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:37 UTC", "discovered_at": "2026-10-06T09:20:37.000Z" }, { "id": 152988, "urlhaus_id": "3943384", "url": "https://github.com/MaoDeew/open24-website/raw/refs/heads/master/assets/brands/website-open-v3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:37 UTC", "discovered_at": "2026-10-06T09:20:37.000Z" }, { "id": 152997, "urlhaus_id": "3943375", "url": "https://github.com/Andersonjesusvital/Speech-Recognition-RNN/raw/refs/heads/main/ammonitoid/Speech-Recognition-RNN-v2.6-alpha.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:36 UTC", "discovered_at": "2026-10-06T09:20:36.000Z" }, { "id": 152996, "urlhaus_id": "3943376", "url": "https://github.com/luthfi-cpu/NitroPDF-Editor/raw/refs/heads/main/Jarvis/Editor_PD_Nitro_1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:36 UTC", "discovered_at": "2026-10-06T09:20:36.000Z" }, { "id": 152995, "urlhaus_id": "3943377", "url": "https://github.com/Smilchannel/bukkit-nbt/raw/refs/heads/main/src/bukkit-nbt-3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:36 UTC", "discovered_at": "2026-10-06T09:20:36.000Z" }, { "id": 153004, "urlhaus_id": "3943368", "url": "https://github.com/yoniespaa/family-crush-unlocked-edition/raw/refs/heads/branch/noncaste/edition-unlocked-family-crush-v3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:35 UTC", "discovered_at": "2026-10-06T09:20:35.000Z" }, { "id": 153003, "urlhaus_id": "3943369", "url": "https://github.com/Ajethpraveen/concept-explorer/raw/refs/heads/main/hydroferricyanic/explorer_concept_v1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:35 UTC", "discovered_at": "2026-10-06T09:20:35.000Z" }, { "id": 153002, "urlhaus_id": "3943370", "url": "https://github.com/iftekharul01/flutter_application_1/raw/refs/heads/main/web/application-flutter-2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:35 UTC", "discovered_at": "2026-10-06T09:20:35.000Z" }, { "id": 153001, "urlhaus_id": "3943371", "url": "https://github.com/24kEmrx1/safe-object-avalonia/raw/refs/heads/main/NexpLock/NexpLock/Runners/avalonia-object-safe-v2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:35 UTC", "discovered_at": "2026-10-06T09:20:35.000Z" }, { "id": 153000, "urlhaus_id": "3943372", "url": "https://raw.githubusercontent.com/Zaid-daoud/currency_converter/main/ios/Runner.xcodeproj/currency-converter-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:35 UTC", "discovered_at": "2026-10-06T09:20:35.000Z" }, { "id": 152999, "urlhaus_id": "3943373", "url": "https://raw.githubusercontent.com/Habib255/moto-parts-server-side/main/immersion/parts-server-moto-side-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:35 UTC", "discovered_at": "2026-10-06T09:20:35.000Z" }, { "id": 152998, "urlhaus_id": "3943374", "url": "https://github.com/Edwinramirezgon/Abstract-Method/raw/refs/heads/main/src/productos/virtual/Method_Abstract_1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:35 UTC", "discovered_at": "2026-10-06T09:20:35.000Z" }, { "id": 153008, "urlhaus_id": "3943364", "url": "https://raw.githubusercontent.com/jones0chikwezga/weather_app/main/windows/flutter/weather-app-2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:34 UTC", "discovered_at": "2026-10-06T09:20:34.000Z" }, { "id": 153007, "urlhaus_id": "3943365", "url": "https://github.com/Putra2204/tiny-pro/raw/refs/heads/dev/template/nestJs/libs/pro_tiny_v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:34 UTC", "discovered_at": "2026-10-06T09:20:34.000Z" }, { "id": 153006, "urlhaus_id": "3943366", "url": "https://raw.githubusercontent.com/HEL-d/HEL-d/main/ignition/d-HE-2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:34 UTC", "discovered_at": "2026-10-06T09:20:34.000Z" }, { "id": 153005, "urlhaus_id": "3943367", "url": "https://github.com/khusnul598/sound-particles-density-112-unlocked-edition/raw/refs/heads/branch/zygosporangium/sound_edition_density_unlocked_particles_deltation.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:34 UTC", "discovered_at": "2026-10-06T09:20:34.000Z" }, { "id": 153012, "urlhaus_id": "3943360", "url": "https://raw.githubusercontent.com/SyedFuzlan/project-x/main/.github/project-x-v2.9-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:26 UTC", "discovered_at": "2026-10-06T09:20:26.000Z" }, { "id": 153011, "urlhaus_id": "3943361", "url": "https://raw.githubusercontent.com/MudassirQureshi7987/Tour_Package_Management/main/src/Tour-Management-Package-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:26 UTC", "discovered_at": "2026-10-06T09:20:26.000Z" }, { "id": 153010, "urlhaus_id": "3943362", "url": "https://raw.githubusercontent.com/George3d/zuri.team-george/main/George/_images/team_zuri_george_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:26 UTC", "discovered_at": "2026-10-06T09:20:26.000Z" }, { "id": 153009, "urlhaus_id": "3943363", "url": "https://raw.githubusercontent.com/Readwanul/Ecommerce-backend/main/protopectinase/Ecommerce-backend.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:26 UTC", "discovered_at": "2026-10-06T09:20:26.000Z" }, { "id": 153014, "urlhaus_id": "3943358", "url": "https://github.com/hugonattan/TechFix/raw/refs/heads/main/public/css/Fix-Tech-3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:25 UTC", "discovered_at": "2026-10-06T09:20:25.000Z" }, { "id": 153013, "urlhaus_id": "3943359", "url": "https://github.com/SenSeiSGS/LearningPlatform/raw/refs/heads/main/unequaled/Learning_Platform_v2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:25 UTC", "discovered_at": "2026-10-06T09:20:25.000Z" }, { "id": 153016, "urlhaus_id": "3943356", "url": "https://raw.githubusercontent.com/mubashshir96/my-chat/main/tortuous/my-chat-homoglot.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:24 UTC", "discovered_at": "2026-10-06T09:20:24.000Z" }, { "id": 153015, "urlhaus_id": "3943357", "url": "https://raw.githubusercontent.com/JOAdevLoper/Better-R1/main/ocuby/Better-v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:24 UTC", "discovered_at": "2026-10-06T09:20:24.000Z" }, { "id": 153020, "urlhaus_id": "3943352", "url": "https://github.com/Theoplayz2/eda-explorer/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:23 UTC", "discovered_at": "2026-10-06T09:20:23.000Z" }, { "id": 153019, "urlhaus_id": "3943353", "url": "https://github.com/lamaSonmez/insider-editor/raw/refs/heads/master/src/insider_editor_1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:23 UTC", "discovered_at": "2026-10-06T09:20:23.000Z" }, { "id": 153018, "urlhaus_id": "3943354", "url": "https://github.com/0290192029/apartment-price-predictor/releases/download/v1.0/Soft.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:23 UTC", "discovered_at": "2026-10-06T09:20:23.000Z" }, { "id": 153017, "urlhaus_id": "3943355", "url": "https://github.com/glakshya20/TEDxTIET-carousel.1/raw/refs/heads/main/Hesperic/TE_TIE_Dx_carousel_1.5-alpha.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:23 UTC", "discovered_at": "2026-10-06T09:20:23.000Z" }, { "id": 153022, "urlhaus_id": "3943350", "url": "https://github.com/Phinee/Ocg/raw/refs/heads/main/storage/app/public/Software_v3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:20 UTC", "discovered_at": "2026-10-06T09:20:20.000Z" }, { "id": 153021, "urlhaus_id": "3943351", "url": "https://raw.githubusercontent.com/Mehul-Rathva/cyber-forge-institute-web/main/src/lib/institute-cyber-forge-web-3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:20 UTC", "discovered_at": "2026-10-06T09:20:20.000Z" }, { "id": 153023, "urlhaus_id": "3943349", "url": "https://github.com/devwarly/ads-backend-java-springboot-apinoticias/raw/refs/heads/main/src/main/java/com/application/ads/controller/java-backend-apinoticias-springboot-ads-v1.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:19 UTC", "discovered_at": "2026-10-06T09:20:19.000Z" }, { "id": 153024, "urlhaus_id": "3943348", "url": "https://github.com/AshishParulekar/AshishParulekar/raw/refs/heads/main/Acromyodi/Ashish-Parulekar-2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:17 UTC", "discovered_at": "2026-10-06T09:20:17.000Z" }, { "id": 153025, "urlhaus_id": "3943347", "url": "https://github.com/mommommommom123/Bliss_Browser_Jolie/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:12 UTC", "discovered_at": "2026-10-06T09:20:12.000Z" }, { "id": 153031, "urlhaus_id": "3943341", "url": "https://github.com/daffa1313/DevOps-Training/raw/refs/heads/main/hemorrhoid/Training-Ops-Dev-2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:10 UTC", "discovered_at": "2026-10-06T09:20:10.000Z" }, { "id": 153030, "urlhaus_id": "3943342", "url": "https://raw.githubusercontent.com/AkandindaJunior/Cloud-Services/main/Triassic/Services_Cloud_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:10 UTC", "discovered_at": "2026-10-06T09:20:10.000Z" }, { "id": 153029, "urlhaus_id": "3943343", "url": "https://github.com/sirrosales/farcry5-nsfw-enhancement-patch/raw/refs/heads/branch/chorook/farcry_patch_nsfw_enhancement_1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:10 UTC", "discovered_at": "2026-10-06T09:20:10.000Z" }, { "id": 153028, "urlhaus_id": "3943344", "url": "https://raw.githubusercontent.com/LeboMeje/lebomeje.github.io/master/superposed/github-io-lebomeje-3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:10 UTC", "discovered_at": "2026-10-06T09:20:10.000Z" }, { "id": 153027, "urlhaus_id": "3943345", "url": "https://raw.githubusercontent.com/RaviChatta/advance-filestore-bot/main/plugins/bot-filestore-advance-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:10 UTC", "discovered_at": "2026-10-06T09:20:10.000Z" }, { "id": 153026, "urlhaus_id": "3943346", "url": "https://raw.githubusercontent.com/nishantsoudai8755/makeimpact-py/main/makeimpact/makeimpact_py_v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:10 UTC", "discovered_at": "2026-10-06T09:20:10.000Z" }, { "id": 153033, "urlhaus_id": "3943339", "url": "https://github.com/ksxenks/ksxenks/raw/refs/heads/main/troke/Software_astrild.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:09 UTC", "discovered_at": "2026-10-06T09:20:09.000Z" }, { "id": 153032, "urlhaus_id": "3943340", "url": "https://github.com/lamaSonmez/onpush-angular-demo/raw/refs/heads/main/src/demo_angular_onpush_3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:09 UTC", "discovered_at": "2026-10-06T09:20:09.000Z" }, { "id": 153037, "urlhaus_id": "3943335", "url": "https://raw.githubusercontent.com/ryuk956983/repo-pic/main/public/repo-pic-2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:07 UTC", "discovered_at": "2026-10-06T09:20:07.000Z" }, { "id": 153036, "urlhaus_id": "3943336", "url": "https://raw.githubusercontent.com/Devraq/logbook_rtt/main/app/Http/Controllers/rtt-logbook-v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:07 UTC", "discovered_at": "2026-10-06T09:20:07.000Z" }, { "id": 153035, "urlhaus_id": "3943337", "url": "https://raw.githubusercontent.com/Mehul-Rathva/DR-Parag-Rana/main/src/components/ui/D_Parag_Rana_v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:07 UTC", "discovered_at": "2026-10-06T09:20:07.000Z" }, { "id": 153034, "urlhaus_id": "3943338", "url": "https://raw.githubusercontent.com/cessar0311/Hamster-Kombat/master/bot/api/Kombat-Hamster-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:07 UTC", "discovered_at": "2026-10-06T09:20:07.000Z" }, { "id": 153038, "urlhaus_id": "3943334", "url": "https://raw.githubusercontent.com/c0d3Gamer/my-fourth-project/master/.vscode/fourth_my_project_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:06 UTC", "discovered_at": "2026-10-06T09:20:06.000Z" }, { "id": 153039, "urlhaus_id": "3943333", "url": "https://raw.githubusercontent.com/FALPERIO/ShadowSphere/main/input/Shadow_Sphere_3.2-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:05 UTC", "discovered_at": "2026-10-06T09:20:05.000Z" }, { "id": 153042, "urlhaus_id": "3943330", "url": "https://github.com/RodrigoDevBnu/web-calculator/raw/refs/heads/main/audioeimg/web_calculator_v3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:04 UTC", "discovered_at": "2026-10-06T09:20:04.000Z" }, { "id": 153041, "urlhaus_id": "3943331", "url": "https://github.com/agnet57/fantasy-cricket-internshala-python-final-project/raw/refs/heads/master/seropneumothorax/python-cricket-project-final-internshala-fantasy-v3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:04 UTC", "discovered_at": "2026-10-06T09:20:04.000Z" }, { "id": 153040, "urlhaus_id": "3943332", "url": "https://raw.githubusercontent.com/kojo-shark/ReactAssignment/master/src/Components/React-Assignment-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:04 UTC", "discovered_at": "2026-10-06T09:20:04.000Z" }, { "id": 153043, "urlhaus_id": "3943329", "url": "https://github.com/snehilhbtu/bloc_ex1/raw/refs/heads/main/macos/Runner/Assets.xcassets/ex_bloc_3.2-beta.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:03 UTC", "discovered_at": "2026-10-06T09:20:03.000Z" }, { "id": 153047, "urlhaus_id": "3943325", "url": "https://raw.githubusercontent.com/Aashir01124/Neural-Network-Modifications-Hyperparameter-Experiments/main/Micky/Modifications_Network_Hyperparameter_Neural_Experiments_pataca.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:02 UTC", "discovered_at": "2026-10-06T09:20:02.000Z" }, { "id": 153046, "urlhaus_id": "3943326", "url": "https://raw.githubusercontent.com/Readwanul/Laravel-proj/main/myosarcomatous/Laravel-proj.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:02 UTC", "discovered_at": "2026-10-06T09:20:02.000Z" }, { "id": 153045, "urlhaus_id": "3943327", "url": "https://raw.githubusercontent.com/RushiRuns/AudioEditorKit/main/Sources/AudioClip/Kit_Audio_Editor_v3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:02 UTC", "discovered_at": "2026-10-06T09:20:02.000Z" }, { "id": 153044, "urlhaus_id": "3943328", "url": "https://raw.githubusercontent.com/Endrwuw/Pic16F84A-/main/.github/steps/Pic-v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:02 UTC", "discovered_at": "2026-10-06T09:20:02.000Z" }, { "id": 153052, "urlhaus_id": "3943320", "url": "https://raw.githubusercontent.com/lyx2022518/3x-ui-cn/main/web/html/common/cn-ui-x-1.9-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:01 UTC", "discovered_at": "2026-10-06T09:20:01.000Z" }, { "id": 153051, "urlhaus_id": "3943321", "url": "https://raw.githubusercontent.com/Gabrielyop50/Gabriel/master/database/Software-2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:01 UTC", "discovered_at": "2026-10-06T09:20:01.000Z" }, { "id": 153050, "urlhaus_id": "3943322", "url": "https://raw.githubusercontent.com/kumarsreenivas051/Grocery-Database-Management-System/master/demo/js/lib/Management-System-Database-Grocery-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:01 UTC", "discovered_at": "2026-10-06T09:20:01.000Z" }, { "id": 153049, "urlhaus_id": "3943323", "url": "https://raw.githubusercontent.com/ZainabEman/Smart-Drone-Delivery-Planner/main/schmaltz/Smart-Drone-Delivery-Planner.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:01 UTC", "discovered_at": "2026-10-06T09:20:01.000Z" }, { "id": 153048, "urlhaus_id": "3943324", "url": "https://raw.githubusercontent.com/elytra993/html/main/corroder/html_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:01 UTC", "discovered_at": "2026-10-06T09:20:01.000Z" }, { "id": 153053, "urlhaus_id": "3943319", "url": "https://raw.githubusercontent.com/Kfirm1208/HW-survivor-rubber-hackathon/main/node_modules/@line/bot-sdk/lib/webhook/rubber_survivor_H_hackathon_zygion.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:20:00 UTC", "discovered_at": "2026-10-06T09:20:00.000Z" }, { "id": 153057, "urlhaus_id": "3943315", "url": "https://github.com/ghadahafez/Cipher-Text-and-Image-Cryptography-/raw/refs/heads/master/src/com/Cipher/Crypto/AlgorithmView/EncryptionDecryption/ImageEncryptionDecryption/Cryptography-Cipher-and-Text-Image-v2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:59 UTC", "discovered_at": "2026-10-06T09:19:59.000Z" }, { "id": 153056, "urlhaus_id": "3943316", "url": "https://github.com/Peemkay/Happy-Birthday/raw/refs/heads/main/reforce/Birthday-Happy-v1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:59 UTC", "discovered_at": "2026-10-06T09:19:59.000Z" }, { "id": 153055, "urlhaus_id": "3943317", "url": "https://github.com/Crazyde/Crazyde/raw/refs/heads/main/Asteroxylaceae/Software_v2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:59 UTC", "discovered_at": "2026-10-06T09:19:59.000Z" }, { "id": 153054, "urlhaus_id": "3943318", "url": "https://github.com/NoroGeek/Departament-of-Truth-Core/raw/refs/heads/main/reactivate/Departament-of-Truth-Core-v1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:59 UTC", "discovered_at": "2026-10-06T09:19:59.000Z" }, { "id": 153058, "urlhaus_id": "3943314", "url": "https://github.com/Iriiiiii83838/chronicle-sniffer/raw/refs/heads/main/terraform/modules/cloudrun_processor/sniffer_chronicle_tensely.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:58 UTC", "discovered_at": "2026-10-06T09:19:58.000Z" }, { "id": 153059, "urlhaus_id": "3943313", "url": "https://github.com/InFerNaPe000/zenfeed/raw/refs/heads/main/pkg/scrape/scraper/Software-3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:55 UTC", "discovered_at": "2026-10-06T09:19:55.000Z" }, { "id": 153067, "urlhaus_id": "3943305", "url": "https://github.com/XBANIDO/xkucoinbot-auto-clicker/raw/refs/heads/branch/egality/clicker-auto-xkucoinbot-v3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153066, "urlhaus_id": "3943306", "url": "https://github.com/rainesalvo/rainesalvo/raw/refs/heads/main/infraterritorial/Software-palmitoleic.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153065, "urlhaus_id": "3943307", "url": "https://github.com/George3d/George3d/raw/refs/heads/main/tetrahedroid/d_George_2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153064, "urlhaus_id": "3943308", "url": "https://raw.githubusercontent.com/Kfirm1208/Activity14/master/public/Activity-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153063, "urlhaus_id": "3943309", "url": "https://raw.githubusercontent.com/RodrigoDevBnu/CalculatorWhite/main/lanciers/Calculator-White-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153062, "urlhaus_id": "3943310", "url": "https://raw.githubusercontent.com/tienanh1211/Study-Planner/main/frontend/src/components/Planner_Study_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153061, "urlhaus_id": "3943311", "url": "https://github.com/Cheruspee/sifu-nsfw-modzone/raw/refs/heads/branch/condensate/modzone_nsfw_sifu_2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153060, "urlhaus_id": "3943312", "url": "https://raw.githubusercontent.com/RodrigoDevBnu/Cardapio-Restaurante/main/styles/Cardapio-Restaurante-v2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:54 UTC", "discovered_at": "2026-10-06T09:19:54.000Z" }, { "id": 153070, "urlhaus_id": "3943302", "url": "https://raw.githubusercontent.com/emrepl22/note-taker/main/spermatheca/taker_note_v3.0-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:53 UTC", "discovered_at": "2026-10-06T09:19:53.000Z" }, { "id": 153069, "urlhaus_id": "3943303", "url": "https://raw.githubusercontent.com/anak4ta/blox-fruits-script-hub/branch/epithymetical/fruits_script_blox_hub_2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:53 UTC", "discovered_at": "2026-10-06T09:19:53.000Z" }, { "id": 153068, "urlhaus_id": "3943304", "url": "https://github.com/VantageSolutions/ShadowTool/raw/refs/heads/master/src/test/Shadow-Tool-v2.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:53 UTC", "discovered_at": "2026-10-06T09:19:53.000Z" }, { "id": 153073, "urlhaus_id": "3943299", "url": "https://github.com/LULIPOOP9078/SOLANA-TRADING-SOLUTION/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:52 UTC", "discovered_at": "2026-10-06T09:19:52.000Z" }, { "id": 153072, "urlhaus_id": "3943300", "url": "https://github.com/CYBERDRAGE/Roblox-Delta/raw/refs/heads/master/assertorial/Roblox_Delta_1.2-beta.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:52 UTC", "discovered_at": "2026-10-06T09:19:52.000Z" }, { "id": 153071, "urlhaus_id": "3943301", "url": "https://github.com/Atuti/Chato/raw/refs/heads/main/src/main/java/Software_2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:52 UTC", "discovered_at": "2026-10-06T09:19:52.000Z" }, { "id": 153074, "urlhaus_id": "3943298", "url": "https://github.com/Chrislovlin/dune-awakening-toolkit/raw/refs/heads/branch/teethlike/dune-awakening-toolkit-v3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:51 UTC", "discovered_at": "2026-10-06T09:19:51.000Z" }, { "id": 153075, "urlhaus_id": "3943297", "url": "https://raw.githubusercontent.com/MEDDKFMF/makerlabs/main/src/pages/makerlabs-1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:49 UTC", "discovered_at": "2026-10-06T09:19:49.000Z" }, { "id": 153076, "urlhaus_id": "3943296", "url": "https://github.com/LiehSt/WhingsCodeRedeem/raw/refs/heads/main/src/Code-Redeem-Whings-3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:48 UTC", "discovered_at": "2026-10-06T09:19:48.000Z" }, { "id": 153077, "urlhaus_id": "3943295", "url": "https://github.com/Thinh1107/Market-Overview-Indexes-Forex-Metals-Crypto/releases/download/v2.0/Release_x64.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:47 UTC", "discovered_at": "2026-10-06T09:19:47.000Z" }, { "id": 153082, "urlhaus_id": "3943290", "url": "https://raw.githubusercontent.com/kiran03-jagadeesh/CSS-Basic-Project/main/biarcuate/CS-Basic-Project-2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:46 UTC", "discovered_at": "2026-10-06T09:19:46.000Z" }, { "id": 153081, "urlhaus_id": "3943291", "url": "https://raw.githubusercontent.com/SanikaC1999/WeatherApp/main/blackcock/WeatherApp.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:46 UTC", "discovered_at": "2026-10-06T09:19:46.000Z" }, { "id": 153080, "urlhaus_id": "3943292", "url": "https://raw.githubusercontent.com/PublicityMinistry-UoE-CU/tailscale-healthcheck/main/lichened/healthcheck_tailscale_v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:46 UTC", "discovered_at": "2026-10-06T09:19:46.000Z" }, { "id": 153079, "urlhaus_id": "3943293", "url": "https://raw.githubusercontent.com/elytra993/elytra993.github.io/main/includes/elytra993.github.io_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:46 UTC", "discovered_at": "2026-10-06T09:19:46.000Z" }, { "id": 153078, "urlhaus_id": "3943294", "url": "https://raw.githubusercontent.com/bigpablojohn/SoftMicro_Drapes_1.x/SoftMicro_Drapes_1.x_Main-dev/OldVersions/GITIGNORE/1/1-100/Soft_Micro_x_Drapes_3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:46 UTC", "discovered_at": "2026-10-06T09:19:46.000Z" }, { "id": 153093, "urlhaus_id": "3943279", "url": "https://github.com/vinothanS/portfolio/raw/refs/heads/master/src/app/contact/Software-v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153092, "urlhaus_id": "3943280", "url": "https://github.com/moamen-dev/react-projects/raw/refs/heads/main/src/projects_react_v2.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153091, "urlhaus_id": "3943281", "url": "https://github.com/zainalibora/hyperion/raw/refs/heads/main/files/scripts/Software-misrecollect.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153090, "urlhaus_id": "3943282", "url": "https://github.com/minhtungonep/android-traffic-analysis/raw/refs/heads/master/analysis_plots/traffic-android-analysis-3.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153089, "urlhaus_id": "3943283", "url": "https://github.com/guiqmaia/exercicio_figma/raw/refs/heads/main/ios/Runner.xcodeproj/xcshareddata/figma_exercicio_hyperphysics.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153088, "urlhaus_id": "3943284", "url": "https://raw.githubusercontent.com/vikasoni12/portfolio.github.io/master/.vs/github-portfolio-io-v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153087, "urlhaus_id": "3943285", "url": "https://raw.githubusercontent.com/EmanuelCortez21/chatgpt-summary/main/astatine/summary_chatgpt_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153086, "urlhaus_id": "3943286", "url": "https://raw.githubusercontent.com/kris1019/Symphony/main/.roo/rules-symphony-conductor/Software_2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153085, "urlhaus_id": "3943287", "url": "https://raw.githubusercontent.com/ngotrunganhh/PiggyPiggy-Hack-Game-Bot-Auto-Farm-Clicker-Crypto-Api-Cheat/main/PiggyPiggy-Bot/Clicker-Game-Crypto-Auto-Cheat-Api-Farm-Hack-Piggy-Bot-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153084, "urlhaus_id": "3943288", "url": "https://raw.githubusercontent.com/naclva/MemeBox-3000/main/favicon/Box_Meme_v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153083, "urlhaus_id": "3943289", "url": "https://raw.githubusercontent.com/guiqmaia/design_system/main/test/system_design_1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:45 UTC", "discovered_at": "2026-10-06T09:19:45.000Z" }, { "id": 153099, "urlhaus_id": "3943273", "url": "https://github.com/Testig-78/Energy-Consumption-Dashboard-SQL-Excel/raw/refs/heads/main/contermine/Dashboard_Excel_SQ_Consumption_Energy_2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:44 UTC", "discovered_at": "2026-10-06T09:19:44.000Z" }, { "id": 153098, "urlhaus_id": "3943274", "url": "https://raw.githubusercontent.com/XxOdynxX/bookly-react-19/main/src/books/bookly_react_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:44 UTC", "discovered_at": "2026-10-06T09:19:44.000Z" }, { "id": 153097, "urlhaus_id": "3943275", "url": "https://github.com/khanhhuy1304/ai-media-studio-cli/raw/refs/heads/main/ai_media_studio_cli/ai_media_cli_studio_conceit.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:44 UTC", "discovered_at": "2026-10-06T09:19:44.000Z" }, { "id": 153096, "urlhaus_id": "3943276", "url": "https://raw.githubusercontent.com/rijackkson/dio-java-basico/main/.vscode/java_basico_dio_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:44 UTC", "discovered_at": "2026-10-06T09:19:44.000Z" }, { "id": 153095, "urlhaus_id": "3943277", "url": "https://raw.githubusercontent.com/Arslan97/General-Signal-Generator/main/practitional/Generator-Signal-General-v1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:44 UTC", "discovered_at": "2026-10-06T09:19:44.000Z" }, { "id": 153094, "urlhaus_id": "3943278", "url": "https://github.com/glakshya20/restaurant-website-frontend-/raw/refs/heads/main/icons/website-frontend-restaurant-1.6-beta.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:44 UTC", "discovered_at": "2026-10-06T09:19:44.000Z" }, { "id": 153102, "urlhaus_id": "3943270", "url": "https://github.com/astrolabscig/randomquotes/raw/refs/heads/main/src/Software-v3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:43 UTC", "discovered_at": "2026-10-06T09:19:43.000Z" }, { "id": 153101, "urlhaus_id": "3943271", "url": "https://github.com/ngotrunganhh/trunganhpre/raw/refs/heads/main/font/Software-2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:43 UTC", "discovered_at": "2026-10-06T09:19:43.000Z" }, { "id": 153100, "urlhaus_id": "3943272", "url": "https://github.com/afzaal11/test/raw/refs/heads/main/.github/Software-1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:43 UTC", "discovered_at": "2026-10-06T09:19:43.000Z" }, { "id": 153104, "urlhaus_id": "3943268", "url": "https://github.com/bfabradiaz/bfabradiaz/raw/refs/heads/main/choledochitis/Software-seditiously.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:42 UTC", "discovered_at": "2026-10-06T09:19:42.000Z" }, { "id": 153103, "urlhaus_id": "3943269", "url": "https://github.com/lamaSonmez/articles_management/raw/refs/heads/master/test/e2e/articles-management-2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:42 UTC", "discovered_at": "2026-10-06T09:19:42.000Z" }, { "id": 153109, "urlhaus_id": "3943263", "url": "https://github.com/RodrigoDevBnu/Buscador-CEP/raw/refs/heads/master/src/CEP_Buscador_v3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:41 UTC", "discovered_at": "2026-10-06T09:19:41.000Z" }, { "id": 153108, "urlhaus_id": "3943264", "url": "https://github.com/pram84/rna-3d-folding/raw/refs/heads/main/pleasuremonger/d-folding-rna-3.9-beta.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:41 UTC", "discovered_at": "2026-10-06T09:19:41.000Z" }, { "id": 153107, "urlhaus_id": "3943265", "url": "https://github.com/doodooheadthghhhtuttddfhkkjjggfg/Fixing-Error-0x887A0020/releases/download/v2.0/Software.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:41 UTC", "discovered_at": "2026-10-06T09:19:41.000Z" }, { "id": 153106, "urlhaus_id": "3943266", "url": "https://github.com/nourelhoudajeddi/angular/raw/refs/heads/main/backendmysql-sugg-main/node_modules/@jridgewell/Software-1.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:41 UTC", "discovered_at": "2026-10-06T09:19:41.000Z" }, { "id": 153105, "urlhaus_id": "3943267", "url": "https://raw.githubusercontent.com/samiullahhussai/React-Router/master/src/components/Footer/Router-React-1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:41 UTC", "discovered_at": "2026-10-06T09:19:41.000Z" }, { "id": 153110, "urlhaus_id": "3943262", "url": "https://raw.githubusercontent.com/yujongin/GuideUsToVictory/main/GuideUsToVictory/Assets/GabrielAguiarProductions/Prefabs/MagicOrbs/Guide-Victory-To-Us-v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:19:31 UTC", "discovered_at": "2026-10-06T09:19:31.000Z" }, { "id": 153111, "urlhaus_id": "3943261", "url": "http://107.172.132.240/bins/87sbhas6as.arm4", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-06 09:19:18 UTC", "discovered_at": "2026-10-06T09:19:18.000Z" }, { "id": 153113, "urlhaus_id": "3943259", "url": "https://github.com/iqbaldiit/aws-sam-c3-bot/raw/refs/heads/main/chat_bot/__pycache__/bot_c_sam_aws_v1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:11:02 UTC", "discovered_at": "2026-10-06T09:11:02.000Z" }, { "id": 153112, "urlhaus_id": "3943260", "url": "https://github.com/Ch1n3x1/ExamenFinalPizza/raw/refs/heads/main/src/layouts/Final-Examen-Pizza-3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:11:02 UTC", "discovered_at": "2026-10-06T09:11:02.000Z" }, { "id": 153116, "urlhaus_id": "3943256", "url": "https://github.com/quilted-civiccenter984/kanvaz/raw/refs/heads/main/assets/icons/Software_v2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:11:01 UTC", "discovered_at": "2026-10-06T09:11:01.000Z" }, { "id": 153115, "urlhaus_id": "3943257", "url": "https://raw.githubusercontent.com/BrayanOB2003/FIBA_Manager/main/docs/process_dashboard/Manager-FIB-v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:11:01 UTC", "discovered_at": "2026-10-06T09:11:01.000Z" }, { "id": 153114, "urlhaus_id": "3943258", "url": "https://raw.githubusercontent.com/Mattialesto/Fivem/main/backend/Software_1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:11:01 UTC", "discovered_at": "2026-10-06T09:11:01.000Z" }, { "id": 153117, "urlhaus_id": "3943255", "url": "https://github.com/rahuldounde21/student-report-assignment/raw/refs/heads/main/crystallic/student-report-assignment-potterer.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:11:00 UTC", "discovered_at": "2026-10-06T09:11:00.000Z" }, { "id": 153120, "urlhaus_id": "3943252", "url": "https://raw.githubusercontent.com/chitko706124/Html-Sushi/master/phloeoterma/Html-Sushi.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:59 UTC", "discovered_at": "2026-10-06T09:10:59.000Z" }, { "id": 153119, "urlhaus_id": "3943253", "url": "https://raw.githubusercontent.com/iqbaldiit/angular-tour-of-heroes/master/src/assets/angular_tour_of_heroes_1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:59 UTC", "discovered_at": "2026-10-06T09:10:59.000Z" }, { "id": 153118, "urlhaus_id": "3943254", "url": "https://raw.githubusercontent.com/zNemernic/JWAD/main/assets/v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:59 UTC", "discovered_at": "2026-10-06T09:10:59.000Z" }, { "id": 153125, "urlhaus_id": "3943247", "url": "https://github.com/jordiacn/Xylo-business-automation-suite/raw/refs/heads/master/images/suite-automation-Xylo-business-1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:58 UTC", "discovered_at": "2026-10-06T09:10:58.000Z" }, { "id": 153124, "urlhaus_id": "3943248", "url": "https://github.com/lynnshavian741/lecture-auto/raw/refs/heads/main/lucifugous/lecture_auto_v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:58 UTC", "discovered_at": "2026-10-06T09:10:58.000Z" }, { "id": 153123, "urlhaus_id": "3943249", "url": "https://github.com/MohamedElmogy25/MohamedElmogy25/raw/refs/heads/main/odium/Mohamed-Elmogy-v2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:58 UTC", "discovered_at": "2026-10-06T09:10:58.000Z" }, { "id": 153122, "urlhaus_id": "3943250", "url": "https://github.com/Biralo-del/deepRolePlay/raw/refs/heads/main/src/prompts/Play_Role_deep_v2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:58 UTC", "discovered_at": "2026-10-06T09:10:58.000Z" }, { "id": 153121, "urlhaus_id": "3943251", "url": "https://github.com/Logiiiii/Logiiiii/raw/refs/heads/main/pank/Software_3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:58 UTC", "discovered_at": "2026-10-06T09:10:58.000Z" }, { "id": 153126, "urlhaus_id": "3943246", "url": "https://raw.githubusercontent.com/dipeshdarks/anime/main/Antilopinae/Software_v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:56 UTC", "discovered_at": "2026-10-06T09:10:56.000Z" }, { "id": 153128, "urlhaus_id": "3943244", "url": "https://github.com/ackoDotDev/address_book/raw/refs/heads/main/resources/sass/book_address_3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:55 UTC", "discovered_at": "2026-10-06T09:10:55.000Z" }, { "id": 153127, "urlhaus_id": "3943245", "url": "https://github.com/ayushup5000/combat-warriors-roblox-script-hub/raw/refs/heads/branch/iodide/roblox-combat-hub-script-warriors-sulfazide.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:55 UTC", "discovered_at": "2026-10-06T09:10:55.000Z" }, { "id": 153129, "urlhaus_id": "3943243", "url": "https://raw.githubusercontent.com/clevastunning3272/ViVa/main/greaten/Vi_Va_hauler.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:54 UTC", "discovered_at": "2026-10-06T09:10:54.000Z" }, { "id": 153134, "urlhaus_id": "3943238", "url": "https://github.com/Shrikrushnatekade/Hex-Code-Auto-Generate/raw/refs/heads/main/pancreatopathy/Auto_Hex_Generate_Code_v1.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:53 UTC", "discovered_at": "2026-10-06T09:10:53.000Z" }, { "id": 153133, "urlhaus_id": "3943239", "url": "https://github.com/WesleyHass/BB-RACING-CHEAT-ENGINE-SCRIPT/raw/refs/heads/main/panpsychist/ENGIN-SCRIPT-RACIN-B-CHEA-theoastrological.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:53 UTC", "discovered_at": "2026-10-06T09:10:53.000Z" }, { "id": 153132, "urlhaus_id": "3943240", "url": "https://github.com/hajahberi-hue/hermes-agent-ui-v1.0/raw/refs/heads/main/Serpentis/agent-ui-v-hermes-3.3-alpha.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:53 UTC", "discovered_at": "2026-10-06T09:10:53.000Z" }, { "id": 153131, "urlhaus_id": "3943241", "url": "https://github.com/Arfa01/PostCrossing/raw/refs/heads/main/node_modules/mongodb/lib/cmap/wire_protocol/Crossing_Post_v2.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:53 UTC", "discovered_at": "2026-10-06T09:10:53.000Z" }, { "id": 153130, "urlhaus_id": "3943242", "url": "https://github.com/ebroky/shadow-myth-wukong-toolset/raw/refs/heads/branch/scrollhead/wukong_toolset_myth_shadow_1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:53 UTC", "discovered_at": "2026-10-06T09:10:53.000Z" }, { "id": 153142, "urlhaus_id": "3943230", "url": "https://github.com/Dokercik/tf2-advantage-toolkit/raw/refs/heads/branch/caseweed/toolkit_tf_advantage_v3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153141, "urlhaus_id": "3943231", "url": "https://raw.githubusercontent.com/astrolabscig/ai-resume-analyzer/main/app/components/ai_resume_analyzer_v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153140, "urlhaus_id": "3943232", "url": "https://github.com/fizzalari/react-native-richify/raw/refs/heads/main/src/types/react_native_richify_1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153139, "urlhaus_id": "3943233", "url": "https://github.com/footmeboiya/soenneker.blazor.auth.entrarolesprincipalfactory/raw/refs/heads/main/test/blazor-auth-soenneker-entrarolesprincipalfactory-comical.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153138, "urlhaus_id": "3943234", "url": "https://github.com/dsiddiq786/SWA-scraper/raw/refs/heads/main/json/scraper_SW_v1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153137, "urlhaus_id": "3943235", "url": "https://github.com/AlperenAdam/ATmega328P_IO_Driver/raw/refs/heads/main/typhlostomy/Tmega-A-I-Driver-3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153136, "urlhaus_id": "3943236", "url": "https://raw.githubusercontent.com/niilaajjh/Login-Page/main/cedrine/Login-Page-2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153135, "urlhaus_id": "3943237", "url": "https://github.com/thadeusunconfirmed462/Tiktok-Pro-Tools/raw/refs/heads/main/icons/Tools_Pro_Tiktok_3.0-alpha.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:52 UTC", "discovered_at": "2026-10-06T09:10:52.000Z" }, { "id": 153146, "urlhaus_id": "3943226", "url": "https://github.com/AAzarudeen/Hashing-Text/raw/refs/heads/master/src/pages/Hashing-Text-3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:51 UTC", "discovered_at": "2026-10-06T09:10:51.000Z" }, { "id": 153145, "urlhaus_id": "3943227", "url": "https://raw.githubusercontent.com/heliosmsdos/heliosmsdos/main/electrobus/Software_fellsman.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:51 UTC", "discovered_at": "2026-10-06T09:10:51.000Z" }, { "id": 153144, "urlhaus_id": "3943228", "url": "https://github.com/glassy-forceplay469/skill-autoshorts/raw/refs/heads/main/pyrometry/autoshorts-skill-v2.7-beta.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:51 UTC", "discovered_at": "2026-10-06T09:10:51.000Z" }, { "id": 153143, "urlhaus_id": "3943229", "url": "https://github.com/AchrefBoub/achrefboub-portfolio-/raw/refs/heads/main/public/lottie/achrefboub_portfolio_alcoholize.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:51 UTC", "discovered_at": "2026-10-06T09:10:51.000Z" }, { "id": 153147, "urlhaus_id": "3943225", "url": "https://github.com/FilipStanic/npm-accessibility-script/raw/refs/heads/main/node_modules/parse5-htmlparser2-tree-adapter/dist/cjs/npm_accessibility_script_3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:50 UTC", "discovered_at": "2026-10-06T09:10:50.000Z" }, { "id": 153148, "urlhaus_id": "3943224", "url": "https://raw.githubusercontent.com/dulvinsipsara/ArbiDex/main/utils/Dex_Arbi_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:46 UTC", "discovered_at": "2026-10-06T09:10:46.000Z" }, { "id": 153154, "urlhaus_id": "3943218", "url": "https://github.com/Rohanvp07/Snake-Game-in-C/raw/refs/heads/main/interdebate/C-Game-in-Snake-v3.5-alpha.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:45 UTC", "discovered_at": "2026-10-06T09:10:45.000Z" }, { "id": 153153, "urlhaus_id": "3943219", "url": "https://raw.githubusercontent.com/pankajydv08/pankajydv08/main/overname/pankajydv-1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:45 UTC", "discovered_at": "2026-10-06T09:10:45.000Z" }, { "id": 153152, "urlhaus_id": "3943220", "url": "https://raw.githubusercontent.com/iftekharul01/lab_evo/main/macos/Runner.xcworkspace/xcshareddata/lab-evo-v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:45 UTC", "discovered_at": "2026-10-06T09:10:45.000Z" }, { "id": 153151, "urlhaus_id": "3943221", "url": "https://raw.githubusercontent.com/mariettamoderate135/YT-DLP-Video-Downloader-Extension/main/backend/Extension-Video-Y-DL-Downloader-v2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:45 UTC", "discovered_at": "2026-10-06T09:10:45.000Z" }, { "id": 153150, "urlhaus_id": "3943222", "url": "https://raw.githubusercontent.com/Shashwat970/NASA_SPACE_APP_CHALLENGE/main/haloscope/NASA_SPACE_APP_CHALLENGE-2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:45 UTC", "discovered_at": "2026-10-06T09:10:45.000Z" }, { "id": 153149, "urlhaus_id": "3943223", "url": "https://raw.githubusercontent.com/Aayeshasayyad/Practical-DeFi-Labs/main/assets/module01/lab1/De_Practical_Labs_Fi_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:45 UTC", "discovered_at": "2026-10-06T09:10:45.000Z" }, { "id": 153160, "urlhaus_id": "3943212", "url": "https://github.com/mu122h4554n/Clinic-System/raw/refs/heads/main/pagurid/System-Clinic-v2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:44 UTC", "discovered_at": "2026-10-06T09:10:44.000Z" }, { "id": 153159, "urlhaus_id": "3943213", "url": "https://raw.githubusercontent.com/GIZZN/sliva/main/anchieutectic/sliva.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:44 UTC", "discovered_at": "2026-10-06T09:10:44.000Z" }, { "id": 153158, "urlhaus_id": "3943214", "url": "https://github.com/Gajaa-Azhura/Reactworksheet6.3/raw/refs/heads/master/public/Reactworksheet-makebate.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:44 UTC", "discovered_at": "2026-10-06T09:10:44.000Z" }, { "id": 153157, "urlhaus_id": "3943215", "url": "https://raw.githubusercontent.com/salman-rafii/aquatic_shipping_UI/main/android/app/src/main/res/mipmap-xxhdpi/aquatic-shipping-UI-halesome.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:44 UTC", "discovered_at": "2026-10-06T09:10:44.000Z" }, { "id": 153156, "urlhaus_id": "3943216", "url": "https://github.com/FqpF-c/SB/raw/refs/heads/main/lib/theme/Software_v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:44 UTC", "discovered_at": "2026-10-06T09:10:44.000Z" }, { "id": 153155, "urlhaus_id": "3943217", "url": "https://raw.githubusercontent.com/ChrisJustice600/facturation_project/main/prisma/migrations/facturation_project_v3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:44 UTC", "discovered_at": "2026-10-06T09:10:44.000Z" }, { "id": 153165, "urlhaus_id": "3943207", "url": "https://github.com/tzuye/cepiweek/raw/refs/heads/main/unquiescently/Software_v2.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:43 UTC", "discovered_at": "2026-10-06T09:10:43.000Z" }, { "id": 153164, "urlhaus_id": "3943208", "url": "https://raw.githubusercontent.com/JasperValdez/K-Drama-Tracking/main/public/Tracking_Drama_v3.6-alpha.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:43 UTC", "discovered_at": "2026-10-06T09:10:43.000Z" }, { "id": 153163, "urlhaus_id": "3943209", "url": "https://raw.githubusercontent.com/thuraaungzaw69/delta-force-tactical-tools/branch/unapprehensive/tactical_tools_force_delta_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:43 UTC", "discovered_at": "2026-10-06T09:10:43.000Z" }, { "id": 153162, "urlhaus_id": "3943210", "url": "https://github.com/2534Nicolle/AppBar/raw/refs/heads/main/android/app/src/main/res/values-night/App-Bar-Huldah.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:43 UTC", "discovered_at": "2026-10-06T09:10:43.000Z" }, { "id": 153161, "urlhaus_id": "3943211", "url": "https://github.com/MAXZL1/hackingtool-plugin/raw/refs/heads/main/plugins/hackingtool/skills/hackingtool-plugin-v2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:43 UTC", "discovered_at": "2026-10-06T09:10:43.000Z" }, { "id": 153166, "urlhaus_id": "3943206", "url": "https://github.com/southwestward-cahita452/design-md-sketch/raw/refs/heads/main/resources/design-sketch-md-v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:42 UTC", "discovered_at": "2026-10-06T09:10:42.000Z" }, { "id": 153167, "urlhaus_id": "3943205", "url": "https://github.com/Bosiakoba/Budget-web-app/raw/refs/heads/main/.idx/web_app_Budget_2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:40 UTC", "discovered_at": "2026-10-06T09:10:40.000Z" }, { "id": 153170, "urlhaus_id": "3943202", "url": "https://github.com/rishab-7701/password_changer_using_ReactJs/raw/refs/heads/main/src/Js-using-React-password-changer-3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:38 UTC", "discovered_at": "2026-10-06T09:10:38.000Z" }, { "id": 153169, "urlhaus_id": "3943203", "url": "https://raw.githubusercontent.com/jghitufrcvguy86f7t/chatgpt-site/main/furiousness/site-chatgpt-3.0-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:38 UTC", "discovered_at": "2026-10-06T09:10:38.000Z" }, { "id": 153168, "urlhaus_id": "3943204", "url": "https://github.com/Excellence5567/miners-haven-toolkit/raw/refs/heads/branch/bladdery/toolkit-haven-miners-v3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:38 UTC", "discovered_at": "2026-10-06T09:10:38.000Z" }, { "id": 153172, "urlhaus_id": "3943200", "url": "https://raw.githubusercontent.com/willsondev/realtime-editor-client/main/unimplicable/realtime-editor-client.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:37 UTC", "discovered_at": "2026-10-06T09:10:37.000Z" }, { "id": 153171, "urlhaus_id": "3943201", "url": "https://github.com/MrLoafbread12/unreacted/raw/refs/heads/main/template/public/Software-hierophantic.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:37 UTC", "discovered_at": "2026-10-06T09:10:37.000Z" }, { "id": 153173, "urlhaus_id": "3943199", "url": "https://github.com/taraldesai10/Run-Bhumi/raw/refs/heads/main/macos/Run_Bhumi_v2.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:36 UTC", "discovered_at": "2026-10-06T09:10:36.000Z" }, { "id": 153176, "urlhaus_id": "3943196", "url": "https://github.com/mnochtioui/iSurveyApp/raw/refs/heads/main/src/img/i-App-Survey-v1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:35 UTC", "discovered_at": "2026-10-06T09:10:35.000Z" }, { "id": 153175, "urlhaus_id": "3943197", "url": "https://raw.githubusercontent.com/opxcoder789/UI-UX-DESIGN/main/types/3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:35 UTC", "discovered_at": "2026-10-06T09:10:35.000Z" }, { "id": 153174, "urlhaus_id": "3943198", "url": "https://github.com/Vansh-c/alag-se-python-practise.py/raw/refs/heads/main/choosing/alag-se-python-py-practise-3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:35 UTC", "discovered_at": "2026-10-06T09:10:35.000Z" }, { "id": 153177, "urlhaus_id": "3943195", "url": "https://raw.githubusercontent.com/dipeshdarks/instagarm-fake-login-page-wow/main/humorsomeness/wow-login-page-fake-instagarm-3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:33 UTC", "discovered_at": "2026-10-06T09:10:33.000Z" }, { "id": 153179, "urlhaus_id": "3943193", "url": "https://github.com/Jnewton-lab/github-slideshow/raw/refs/heads/main/node_modules/reveal.js/js/slideshow-github-3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:32 UTC", "discovered_at": "2026-10-06T09:10:32.000Z" }, { "id": 153178, "urlhaus_id": "3943194", "url": "https://raw.githubusercontent.com/markkf66/Cloudflare_vless_trojan/main/Vless_workers_pages/2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:32 UTC", "discovered_at": "2026-10-06T09:10:32.000Z" }, { "id": 153182, "urlhaus_id": "3943190", "url": "https://raw.githubusercontent.com/BabyDriver254/far-cry-6-enhanced-gameplay-tweaks/branch/catenulate/far-enhanced-cry-tweaks-gameplay-v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:31 UTC", "discovered_at": "2026-10-06T09:10:31.000Z" }, { "id": 153181, "urlhaus_id": "3943191", "url": "https://github.com/Amnhed/calendar-app/raw/refs/heads/master/src/hooks/app-calendar-v2.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:31 UTC", "discovered_at": "2026-10-06T09:10:31.000Z" }, { "id": 153180, "urlhaus_id": "3943192", "url": "https://github.com/nvb123456/text-to-speech-app/raw/refs/heads/main/unreclaimedness/app_text_to_speech_v1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:31 UTC", "discovered_at": "2026-10-06T09:10:31.000Z" }, { "id": 153186, "urlhaus_id": "3943186", "url": "https://raw.githubusercontent.com/guiIerme/JobFinder/main/staticfiles/account/js/Finder-Job-v3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:29 UTC", "discovered_at": "2026-10-06T09:10:29.000Z" }, { "id": 153185, "urlhaus_id": "3943187", "url": "https://github.com/codeslide/movieswood/raw/refs/heads/main/glycyphyllin/Software_v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:29 UTC", "discovered_at": "2026-10-06T09:10:29.000Z" }, { "id": 153184, "urlhaus_id": "3943188", "url": "https://raw.githubusercontent.com/Hill-Sudani/Barter-System-App-5/main/components/App_System_Barter_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:29 UTC", "discovered_at": "2026-10-06T09:10:29.000Z" }, { "id": 153183, "urlhaus_id": "3943189", "url": "https://github.com/paoleonardo/taxicab/raw/refs/heads/main/patrilocal/Software_2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:29 UTC", "discovered_at": "2026-10-06T09:10:29.000Z" }, { "id": 153194, "urlhaus_id": "3943178", "url": "https://github.com/03Anmol/onnx-tflite-tfliteint8/raw/refs/heads/main/katabolize/tflite-onnx-tfliteint-v1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153193, "urlhaus_id": "3943179", "url": "https://github.com/ahmedfazil3/SocialFeature/raw/refs/heads/main/assets/Social_Feature_v2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153192, "urlhaus_id": "3943180", "url": "https://github.com/gauravmrgd/quizflow-studio/raw/refs/heads/main/server/services/quizflow-studio-1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153191, "urlhaus_id": "3943181", "url": "https://raw.githubusercontent.com/nomu309/OW2-Hack---Overwatch-2-Aimbot-ESP-2026/main/multiaxial/O-Overwatch-ES-Hack-Aimbot-v3.9-alpha.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153190, "urlhaus_id": "3943182", "url": "https://github.com/youkatalo123-star/ComfyUI_RH_VoxCPM/raw/refs/heads/main/nodes/CPM_Comfy_U_R_Vox_v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153189, "urlhaus_id": "3943183", "url": "https://raw.githubusercontent.com/MarioSamuel/Project_Site/main/src/app/componentes/admin/Project_Site_v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153188, "urlhaus_id": "3943184", "url": "https://raw.githubusercontent.com/willsondev/Pedido-Comida-PWA/main/gastrorrhagia/Pedido-Comida-PWA.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153187, "urlhaus_id": "3943185", "url": "https://github.com/NPrabhat/my-appointment-app/raw/refs/heads/main/src/assets/appointment-my-app-3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:28 UTC", "discovered_at": "2026-10-06T09:10:28.000Z" }, { "id": 153197, "urlhaus_id": "3943175", "url": "https://github.com/gimmesomesleep/JavaShit/raw/refs/heads/main/circularwise/Shit_Java_1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:27 UTC", "discovered_at": "2026-10-06T09:10:27.000Z" }, { "id": 153196, "urlhaus_id": "3943176", "url": "https://raw.githubusercontent.com/AlejandroVelezGuillermo/AlejandroVelezGuillermo/main/Mahican/Alejandro-Velez-Guillermo-1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:27 UTC", "discovered_at": "2026-10-06T09:10:27.000Z" }, { "id": 153195, "urlhaus_id": "3943177", "url": "https://github.com/muhammadAmeen786/Monstera/raw/refs/heads/main/photos/Software_1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:27 UTC", "discovered_at": "2026-10-06T09:10:27.000Z" }, { "id": 153201, "urlhaus_id": "3943171", "url": "https://raw.githubusercontent.com/chauhan766868/Sublime-text-osx/main/structuralize/text-osx-Sublime-3.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:26 UTC", "discovered_at": "2026-10-06T09:10:26.000Z" }, { "id": 153200, "urlhaus_id": "3943172", "url": "https://raw.githubusercontent.com/elnatnael/alx_travel_app_0x00/main/alx_travel_app/x_app_alx_travel_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:26 UTC", "discovered_at": "2026-10-06T09:10:26.000Z" }, { "id": 153199, "urlhaus_id": "3943173", "url": "https://raw.githubusercontent.com/AkuJelekBet/slidesharedownloader/main/src/Software-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:26 UTC", "discovered_at": "2026-10-06T09:10:26.000Z" }, { "id": 153198, "urlhaus_id": "3943174", "url": "https://raw.githubusercontent.com/nishantsoudai8755/testing12345/main/src/testing-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:26 UTC", "discovered_at": "2026-10-06T09:10:26.000Z" }, { "id": 153203, "urlhaus_id": "3943169", "url": "https://github.com/dedev-sys/dedev-sys/raw/refs/heads/main/pierless/dedev-sys-3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:25 UTC", "discovered_at": "2026-10-06T09:10:25.000Z" }, { "id": 153202, "urlhaus_id": "3943170", "url": "https://github.com/ChrisJustice600/demoreactrouter/raw/refs/heads/master/src/assets/Software-v2.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:25 UTC", "discovered_at": "2026-10-06T09:10:25.000Z" }, { "id": 153207, "urlhaus_id": "3943165", "url": "https://raw.githubusercontent.com/rjzxui/token-joiner-and-booster/main/unauthorizedness/and-token-booster-joiner-v1.8-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:22 UTC", "discovered_at": "2026-10-06T09:10:22.000Z" }, { "id": 153206, "urlhaus_id": "3943166", "url": "https://raw.githubusercontent.com/tempt9008/maanya159/main/src/pages/maanya_1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:22 UTC", "discovered_at": "2026-10-06T09:10:22.000Z" }, { "id": 153205, "urlhaus_id": "3943167", "url": "https://raw.githubusercontent.com/Shrikrushnatekade/Online_Visiting_Card_Creation/main/static/Online-Creation-Card-Visiting-3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:22 UTC", "discovered_at": "2026-10-06T09:10:22.000Z" }, { "id": 153204, "urlhaus_id": "3943168", "url": "https://raw.githubusercontent.com/Omkar675/Penetration-testing-toolkit-/main/sulphoantimonious/Penetration_toolkit_testing_v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:22 UTC", "discovered_at": "2026-10-06T09:10:22.000Z" }, { "id": 153209, "urlhaus_id": "3943163", "url": "https://raw.githubusercontent.com/Kartikay7124/Calculator/main/Amoebogeniae/Software_v2.1-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:20 UTC", "discovered_at": "2026-10-06T09:10:20.000Z" }, { "id": 153208, "urlhaus_id": "3943164", "url": "https://raw.githubusercontent.com/Sam-bot-dev/DocuAnalyze/main/screenshots/Docu_Analyze_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:20 UTC", "discovered_at": "2026-10-06T09:10:20.000Z" }, { "id": 153211, "urlhaus_id": "3943161", "url": "https://raw.githubusercontent.com/Chuckaballe60/StudentManagementCRMC/main/villosity/Management-CRMC-Student-v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:19 UTC", "discovered_at": "2026-10-06T09:10:19.000Z" }, { "id": 153210, "urlhaus_id": "3943162", "url": "https://raw.githubusercontent.com/rafafsantos30-lab/S.a.B-King-Instant-Steal-Whitelist-Jubileu_dasParada-by-tiodaesfiha_79813-/main/strangulatory/das-King-Steal-Jubileu-a-Instant-tiodaesfiha-Whitelist-Parada-by-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:19 UTC", "discovered_at": "2026-10-06T09:10:19.000Z" }, { "id": 153213, "urlhaus_id": "3943159", "url": "https://github.com/ronaldodjj/laboratorio_react_native/raw/refs/heads/main/assets/fonts/react-native-laboratorio-keyboard.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:18 UTC", "discovered_at": "2026-10-06T09:10:18.000Z" }, { "id": 153212, "urlhaus_id": "3943160", "url": "https://raw.githubusercontent.com/vinothanS/SNU_2D_ProgrammingTools_IDE_Strand/main/src/main/java/com/vinothan/demo/Tools-SN-Programming-ID-Strand-manager.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:18 UTC", "discovered_at": "2026-10-06T09:10:18.000Z" }, { "id": 153216, "urlhaus_id": "3943156", "url": "https://raw.githubusercontent.com/atomixon49/NEXUS-CHAT/master/src/app/pages/chats/NEXU-CHAT-reneger.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:17 UTC", "discovered_at": "2026-10-06T09:10:17.000Z" }, { "id": 153215, "urlhaus_id": "3943157", "url": "https://raw.githubusercontent.com/iamdeepkr/iamdeepkr/main/Hemipodius/Software_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:17 UTC", "discovered_at": "2026-10-06T09:10:17.000Z" }, { "id": 153214, "urlhaus_id": "3943158", "url": "https://raw.githubusercontent.com/KindaJayant/girlfriend/main/src/girlfriend_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:17 UTC", "discovered_at": "2026-10-06T09:10:17.000Z" }, { "id": 153218, "urlhaus_id": "3943154", "url": "https://raw.githubusercontent.com/Mezo1122/acronis-cyber-backup-15-3-3-activation-suite/branch/jotty/backup_suite_activation_cyber_acronis_2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:16 UTC", "discovered_at": "2026-10-06T09:10:16.000Z" }, { "id": 153217, "urlhaus_id": "3943155", "url": "https://raw.githubusercontent.com/thoughtlessnesscocopah547/RL_for_Game/main/snuggle/Game-for-R-v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:16 UTC", "discovered_at": "2026-10-06T09:10:16.000Z" }, { "id": 153219, "urlhaus_id": "3943153", "url": "https://raw.githubusercontent.com/SivaAkm/MovieApllication/main/src/MovieApllication-v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:15 UTC", "discovered_at": "2026-10-06T09:10:15.000Z" }, { "id": 153222, "urlhaus_id": "3943150", "url": "https://raw.githubusercontent.com/tongtong77/ChatGPT-Next-Web/main/app/config/Chat-GP-Web-Next-3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:14 UTC", "discovered_at": "2026-10-06T09:10:14.000Z" }, { "id": 153221, "urlhaus_id": "3943151", "url": "https://raw.githubusercontent.com/wyzq123/shuziyx123/main/muss/shuziyx-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:14 UTC", "discovered_at": "2026-10-06T09:10:14.000Z" }, { "id": 153220, "urlhaus_id": "3943152", "url": "https://raw.githubusercontent.com/Tanishk9997/strongvault/main/src/content/Software_1.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:14 UTC", "discovered_at": "2026-10-06T09:10:14.000Z" }, { "id": 153231, "urlhaus_id": "3943141", "url": "https://github.com/jajaaa2/Anti-Kick/raw/refs/heads/main/soliped/Kick_Anti_3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153230, "urlhaus_id": "3943142", "url": "https://github.com/rabbanictgbd/laravel-app/raw/refs/heads/main/storage/app/2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153229, "urlhaus_id": "3943143", "url": "https://github.com/adhytiarachman/kayaindo/raw/refs/heads/main/public/Software_1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153228, "urlhaus_id": "3943144", "url": "https://github.com/indiscernible-stringofwords49/codexport/raw/refs/heads/main/tests/Software_1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153227, "urlhaus_id": "3943145", "url": "https://github.com/analyst-ujjwal/Ai_project_13/raw/refs/heads/main/models/Ai_project_v3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153226, "urlhaus_id": "3943146", "url": "https://raw.githubusercontent.com/analyst-ujjwal/Ai_project_6/main/vector_index/Ai_project_1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153225, "urlhaus_id": "3943147", "url": "https://github.com/thaysvs2/payment-api/raw/refs/heads/master/database/api-payment-contester.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153224, "urlhaus_id": "3943148", "url": "https://github.com/Ruelbernal03/awp-executor-suite/raw/refs/heads/branch/archiblastoma/awp-executor-suite-Shakespearolatry.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153223, "urlhaus_id": "3943149", "url": "https://github.com/RodrigoDevBnu/Stopwatch/raw/refs/heads/main/img-sound/Software-1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:13 UTC", "discovered_at": "2026-10-06T09:10:13.000Z" }, { "id": 153236, "urlhaus_id": "3943136", "url": "https://github.com/Harbor19/harbor19.github.io-calculator-app/raw/refs/heads/main/unspleenishly/io-calculator-github-app-harbor-1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:12 UTC", "discovered_at": "2026-10-06T09:10:12.000Z" }, { "id": 153235, "urlhaus_id": "3943137", "url": "https://github.com/Vinod2515/FinSight-AI-550/raw/refs/heads/main/bookhood/Sight_Fin_A_1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:12 UTC", "discovered_at": "2026-10-06T09:10:12.000Z" }, { "id": 153234, "urlhaus_id": "3943138", "url": "https://raw.githubusercontent.com/Pelumi-oloruntegbe/kingsway/main/public/Software_acceptableness.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:12 UTC", "discovered_at": "2026-10-06T09:10:12.000Z" }, { "id": 153233, "urlhaus_id": "3943139", "url": "https://github.com/eliezerfrn/cataclismo-rogue-tools/raw/refs/heads/branch/attractability/cataclismo_rogue_tools_3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:12 UTC", "discovered_at": "2026-10-06T09:10:12.000Z" }, { "id": 153232, "urlhaus_id": "3943140", "url": "https://github.com/mhmdsatria/candak/raw/refs/heads/main/android/gradle/wrapper/Software-v3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:12 UTC", "discovered_at": "2026-10-06T09:10:12.000Z" }, { "id": 153239, "urlhaus_id": "3943133", "url": "https://raw.githubusercontent.com/hermionenoncyclical848/lychee/main/perinium/Software-1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:11 UTC", "discovered_at": "2026-10-06T09:10:11.000Z" }, { "id": 153238, "urlhaus_id": "3943134", "url": "https://github.com/Victor-aseko/BookStoreDB_Assessment/raw/refs/heads/main/antidiffuser/Assessment-Store-D-Book-1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:11 UTC", "discovered_at": "2026-10-06T09:10:11.000Z" }, { "id": 153237, "urlhaus_id": "3943135", "url": "https://github.com/Overembellished-sidewinder141/OffSploit/raw/refs/heads/main/web/templates/Off_Sploit_v2.0-beta.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:10:11 UTC", "discovered_at": "2026-10-06T09:10:11.000Z" }, { "id": 153240, "urlhaus_id": "3943132", "url": "https://raw.githubusercontent.com/111Hamo111/web-site-react/main/src/components/Testimonials/web_react_site_v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:59 UTC", "discovered_at": "2026-10-06T09:09:59.000Z" }, { "id": 153255, "urlhaus_id": "3943117", "url": "https://raw.githubusercontent.com/willsondev/barberia-app/master/graphicalness/barberia-app.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153254, "urlhaus_id": "3943118", "url": "https://raw.githubusercontent.com/ayushcsh/movies2/main/public/movies_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153253, "urlhaus_id": "3943119", "url": "https://github.com/VIN07grinder/Static-Proxy/raw/refs/heads/main/uv/Proxy-Static-2.7-beta.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153252, "urlhaus_id": "3943120", "url": "https://github.com/Natashamehta23/Weather_APP/raw/refs/heads/master/ios/Runner/Base.lproj/Weather-APP-moisten.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153251, "urlhaus_id": "3943121", "url": "https://raw.githubusercontent.com/kabita10/Hr-Dashboard/master/src/app/sign-up/Dashboard_Hr_v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153250, "urlhaus_id": "3943122", "url": "https://raw.githubusercontent.com/rabbanictgbd/b2b-client-side/main/src/routes/b_side_client_v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153249, "urlhaus_id": "3943123", "url": "https://raw.githubusercontent.com/everleiton/proyecto1WebEver_crautos.com/master/stockbroker/proyecto-Ever-crautos-com-Web-rukh.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153248, "urlhaus_id": "3943124", "url": "https://raw.githubusercontent.com/irfanmaulana17/YoloV4/main/overintensification/YoloV4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153247, "urlhaus_id": "3943125", "url": "https://raw.githubusercontent.com/immacualate/ICP-Bootcamp-Beginner/main/archaeologic/Beginner-IC-Bootcamp-subcrepitation.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153246, "urlhaus_id": "3943126", "url": "https://raw.githubusercontent.com/manishmaho/deadzone-rogue-aimboost-suite/branch/Marsipobranchiata/deadzone_aimboost_suite_rogue_v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153245, "urlhaus_id": "3943127", "url": "https://github.com/JohnInWI/TeachableMachine/raw/refs/heads/main/public/Machine_Teachable_v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153244, "urlhaus_id": "3943128", "url": "https://raw.githubusercontent.com/Ashesh-para/Travel-Management-System/main/dinical/System_Travel_Management_forjudger.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153243, "urlhaus_id": "3943129", "url": "https://raw.githubusercontent.com/Muhammad-Hassan-github/CNC-1-Assignment/master/portfolio/CNC-1-Assignment-v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153242, "urlhaus_id": "3943130", "url": "https://raw.githubusercontent.com/KemalFasa/react-master-class/master/.yarn/unplugged/core-js-npm-3.23.2-14b7b07d26/node_modules/core-js/full/async-iterator/react_master_class_v2.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153241, "urlhaus_id": "3943131", "url": "https://raw.githubusercontent.com/SOBSAGAR/snake/main/unapproaching/snake.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:53 UTC", "discovered_at": "2026-10-06T09:09:53.000Z" }, { "id": 153263, "urlhaus_id": "3943109", "url": "https://github.com/KaizerAE/CircuitFlow-Simulator/raw/refs/heads/main/tara/Simulator_Circuit_Flow_3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153262, "urlhaus_id": "3943110", "url": "https://github.com/Rousslan2/tom-jerry-server/raw/refs/heads/main/public/jerry-tom-server-3.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153261, "urlhaus_id": "3943111", "url": "https://github.com/Truongvanhu/Gravit-Signal-Masters-Trading-Crypto-Analysis-Crypto-Signal-Trading-Bot/raw/refs/heads/main/backhanded/Trading_Gravit_Signal_Bot_Masters_Crypto_Analysis_3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153260, "urlhaus_id": "3943112", "url": "https://raw.githubusercontent.com/Eyram233/BisaRx-Interface/main/src/components/Interface-Bisa-Rx-1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153259, "urlhaus_id": "3943113", "url": "https://github.com/rezanajafi1382/odyssey-infinite-advantage-tools/raw/refs/heads/branch/unallowing/tools_advantage_infinite_odyssey_v3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153258, "urlhaus_id": "3943114", "url": "https://raw.githubusercontent.com/Garmode3073/neumorphism/master/lib/models/Software_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153257, "urlhaus_id": "3943115", "url": "https://raw.githubusercontent.com/IamNipuna/src/master/unmimicked/Software-3.7-beta.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153256, "urlhaus_id": "3943116", "url": "https://raw.githubusercontent.com/Shashwat970/Chatbots/main/occlusive/Chatbots-3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:52 UTC", "discovered_at": "2026-10-06T09:09:52.000Z" }, { "id": 153267, "urlhaus_id": "3943105", "url": "https://github.com/YeneMo/combat-master-s4-advantage-tools/raw/refs/heads/branch/retardate/s-combat-tools-advantage-master-v2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:51 UTC", "discovered_at": "2026-10-06T09:09:51.000Z" }, { "id": 153266, "urlhaus_id": "3943106", "url": "https://github.com/Jack-Mash/navisor-debug/raw/refs/heads/main/android/app/src/main/res/mipmap-mdpi/navisor_debug_2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:51 UTC", "discovered_at": "2026-10-06T09:09:51.000Z" }, { "id": 153265, "urlhaus_id": "3943107", "url": "https://github.com/gulfclamatores7360/llmception/raw/refs/heads/main/superexiguity/Software_1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:51 UTC", "discovered_at": "2026-10-06T09:09:51.000Z" }, { "id": 153264, "urlhaus_id": "3943108", "url": "https://raw.githubusercontent.com/Gajaa-Azhura/JS-excersice/master/revelant/J_excersice_2.4-beta.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:51 UTC", "discovered_at": "2026-10-06T09:09:51.000Z" }, { "id": 153272, "urlhaus_id": "3943100", "url": "https://github.com/ChrisJustice600/blog-react/raw/refs/heads/main/src/pages/react-blog-v3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:50 UTC", "discovered_at": "2026-10-06T09:09:50.000Z" }, { "id": 153271, "urlhaus_id": "3943101", "url": "https://github.com/arinitruc5349/Monopoly-Multiplayer/raw/refs/heads/main/denudate/Multiplayer-Monopoly-1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:50 UTC", "discovered_at": "2026-10-06T09:09:50.000Z" }, { "id": 153270, "urlhaus_id": "3943102", "url": "https://github.com/huangdongbo/Apache-Syncope/raw/refs/heads/main/core/self-keymaster-starter/src/main/java/org/apache/syncope/core/keymaster/Apache_Syncope_v3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:50 UTC", "discovered_at": "2026-10-06T09:09:50.000Z" }, { "id": 153269, "urlhaus_id": "3943103", "url": "https://raw.githubusercontent.com/AchrefBoub/personal-portfolio/main/assets/images/projects/portfolio_personal_1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:50 UTC", "discovered_at": "2026-10-06T09:09:50.000Z" }, { "id": 153268, "urlhaus_id": "3943104", "url": "https://raw.githubusercontent.com/Sidelinethirdrater299/Microsoft-Visio-Pro-Installer/main/Rapaces/Pro_Installer_Microsoft_Visio_v1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:50 UTC", "discovered_at": "2026-10-06T09:09:50.000Z" }, { "id": 153273, "urlhaus_id": "3943099", "url": "https://github.com/jeffigy/jeffigy/raw/refs/heads/main/bemuslined/Software_1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:49 UTC", "discovered_at": "2026-10-06T09:09:49.000Z" }, { "id": 153275, "urlhaus_id": "3943097", "url": "https://github.com/Milkupprem/gravity_simulation3d/raw/refs/heads/main/epitheliogenetic/gravity_simulation_d_2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:44 UTC", "discovered_at": "2026-10-06T09:09:44.000Z" }, { "id": 153274, "urlhaus_id": "3943098", "url": "https://github.com/Shoaibxaif/Automation-demo/raw/refs/heads/main/.vscode/Automation-demo-1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:44 UTC", "discovered_at": "2026-10-06T09:09:44.000Z" }, { "id": 153276, "urlhaus_id": "3943096", "url": "http://27.21.24.136:39806/i", "host": "27.21.24.136", "host_ip": "27.21.24.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-06 09:09:43 UTC", "discovered_at": "2026-10-06T09:09:43.000Z" }, { "id": 153277, "urlhaus_id": "3943095", "url": "https://raw.githubusercontent.com/narcos965/cod-no-recoil-macro/main/reoxygenate/cod_macro_no_recoil_1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:40 UTC", "discovered_at": "2026-10-06T09:09:40.000Z" }, { "id": 153281, "urlhaus_id": "3943091", "url": "https://github.com/astrolabscig/calculator/raw/refs/heads/main/src/Software_v3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:39 UTC", "discovered_at": "2026-10-06T09:09:39.000Z" }, { "id": 153280, "urlhaus_id": "3943092", "url": "https://github.com/CRISTOBAL-VIZCAINO/Teslop-shop-app/raw/refs/heads/main/src/app/store-front/pages/gender-page/Teslop_shop_app_v2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:39 UTC", "discovered_at": "2026-10-06T09:09:39.000Z" }, { "id": 153279, "urlhaus_id": "3943093", "url": "https://github.com/Shrikrushnatekade/shrikrushnatekade/raw/refs/heads/main/.github/workflows/shrikrushnatekade_v2.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:39 UTC", "discovered_at": "2026-10-06T09:09:39.000Z" }, { "id": 153278, "urlhaus_id": "3943094", "url": "https://github.com/Taffyreclaimed45/ppt-agent/raw/refs/heads/main/docs/images/claude/ppt_agent_v3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:39 UTC", "discovered_at": "2026-10-06T09:09:39.000Z" }, { "id": 153286, "urlhaus_id": "3943086", "url": "https://github.com/tempt9008/backup/raw/refs/heads/main/src/Software_v2.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:38 UTC", "discovered_at": "2026-10-06T09:09:38.000Z" }, { "id": 153285, "urlhaus_id": "3943087", "url": "https://github.com/KotadiyaJaydeep/End-to-End-Medical-Chatbot-Project-Implementation-Generative-AI/raw/refs/heads/main/templates/Generative-Project-Chatbot-End-to-Medical-Implementation-AI-3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:38 UTC", "discovered_at": "2026-10-06T09:09:38.000Z" }, { "id": 153284, "urlhaus_id": "3943088", "url": "https://raw.githubusercontent.com/wizdomf3lix/Dawn-Farmer/main/src/core/__pycache__/Farmer-Dawn-v1.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:38 UTC", "discovered_at": "2026-10-06T09:09:38.000Z" }, { "id": 153283, "urlhaus_id": "3943089", "url": "https://raw.githubusercontent.com/analyst-ujjwal/Ai_project_24/main/src/project_Ai_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:38 UTC", "discovered_at": "2026-10-06T09:09:38.000Z" }, { "id": 153282, "urlhaus_id": "3943090", "url": "https://raw.githubusercontent.com/Master2600/viajeschile.github.io/main/assets/js/github-viajeschile-io-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:38 UTC", "discovered_at": "2026-10-06T09:09:38.000Z" }, { "id": 153290, "urlhaus_id": "3943082", "url": "https://raw.githubusercontent.com/FelixOyeleke/YOLO-object-detection-with-OpenCV/master/yolo-coco/YOL-detection-with-object-Open-CV-v1.4-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:37 UTC", "discovered_at": "2026-10-06T09:09:37.000Z" }, { "id": 153289, "urlhaus_id": "3943083", "url": "https://raw.githubusercontent.com/chitko706124/first-laravel-app/main/violaquercitrin/first-laravel-app.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:37 UTC", "discovered_at": "2026-10-06T09:09:37.000Z" }, { "id": 153288, "urlhaus_id": "3943084", "url": "https://github.com/TheKanjiTV/CRUD/raw/refs/heads/main/Properties/Software-meagerly.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:37 UTC", "discovered_at": "2026-10-06T09:09:37.000Z" }, { "id": 153287, "urlhaus_id": "3943085", "url": "https://github.com/ismail8690/SAWSUBE/raw/refs/heads/main/frontend/Software_v1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:37 UTC", "discovered_at": "2026-10-06T09:09:37.000Z" }, { "id": 153298, "urlhaus_id": "3943074", "url": "https://raw.githubusercontent.com/Northwestern-caddo190/dashmotion/main/docs/Software-3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153297, "urlhaus_id": "3943075", "url": "https://github.com/GangulyHub/Contact-Form-using-React-JS/raw/refs/heads/main/Backend/src/Contact-using-React-JS-Form-v1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153296, "urlhaus_id": "3943076", "url": "https://raw.githubusercontent.com/Vanshchouksey21/job-finder-practice-project/main/src/utils/job-finder-practice-project_mure.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153295, "urlhaus_id": "3943077", "url": "https://github.com/Antidogmatism/FAQ-Accordion/raw/refs/heads/main/assets/fonts/FA_Accordion_1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153294, "urlhaus_id": "3943078", "url": "https://raw.githubusercontent.com/palmpon001/Social-Media/main/android/app/src/main/java/com/moviecollection/newarchitecture/components/Social_Media_1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153293, "urlhaus_id": "3943079", "url": "https://github.com/Abrockyt/medical-chatbot-app/raw/refs/heads/master/public/medical-app-chatbot-v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153292, "urlhaus_id": "3943080", "url": "https://raw.githubusercontent.com/abhinav579/Chat-JS/main/public/Chat_JS_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153291, "urlhaus_id": "3943081", "url": "https://raw.githubusercontent.com/ayushgoyal73/E-Commerce/main/js/Commerce_v2.2-beta.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:36 UTC", "discovered_at": "2026-10-06T09:09:36.000Z" }, { "id": 153305, "urlhaus_id": "3943067", "url": "https://github.com/Zahra7453/AtomXBitcoinV2/raw/refs/heads/main/deuterogamy/X-Bitcoin-Atom-3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:35 UTC", "discovered_at": "2026-10-06T09:09:35.000Z" }, { "id": 153304, "urlhaus_id": "3943068", "url": "https://github.com/shajith003/To-Do-Task-Application/raw/refs/heads/main/src/components/Application-To-Do-Task-v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:35 UTC", "discovered_at": "2026-10-06T09:09:35.000Z" }, { "id": 153303, "urlhaus_id": "3943069", "url": "https://github.com/dakudaddy3390/re2-adult-enhancements-hub/raw/refs/heads/branch/unked/hub_adult_re_enhancements_v2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:35 UTC", "discovered_at": "2026-10-06T09:09:35.000Z" }, { "id": 153302, "urlhaus_id": "3943070", "url": "https://github.com/shripadk1999/Project_Pizza_Sales_Analysis_Using_SQL_and_Power_BI/raw/refs/heads/main/noncontrolling/Analysis-Power-Sales-Project-Pizza-Using-SQ-and-BI-3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:35 UTC", "discovered_at": "2026-10-06T09:09:35.000Z" }, { "id": 153301, "urlhaus_id": "3943071", "url": "https://github.com/somerandomprogramer/Mars-executor-V.2/raw/refs/heads/main/squdgy/executor_Mars_1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:35 UTC", "discovered_at": "2026-10-06T09:09:35.000Z" }, { "id": 153300, "urlhaus_id": "3943072", "url": "https://raw.githubusercontent.com/caloriepainteddaisy527/RDR-2-Menu-26/main/meromorphic/Menu_RD_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:35 UTC", "discovered_at": "2026-10-06T09:09:35.000Z" }, { "id": 153299, "urlhaus_id": "3943073", "url": "https://github.com/am17jx/natours-api/raw/refs/heads/master/dev-data/natours_api_2.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:35 UTC", "discovered_at": "2026-10-06T09:09:35.000Z" }, { "id": 153308, "urlhaus_id": "3943064", "url": "https://github.com/rbarmyarmy/B4Bomber/raw/refs/heads/main/docs/Bomber-3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:34 UTC", "discovered_at": "2026-10-06T09:09:34.000Z" }, { "id": 153307, "urlhaus_id": "3943065", "url": "https://github.com/milkaunmutilated455/AniKotoAPI/raw/refs/heads/main/src/routes/Koto_Ani_API_twinkless.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:34 UTC", "discovered_at": "2026-10-06T09:09:34.000Z" }, { "id": 153306, "urlhaus_id": "3943066", "url": "https://raw.githubusercontent.com/0ogata0/qwen-php-client/main/phosphoglycerate/client_qwen_php_v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:34 UTC", "discovered_at": "2026-10-06T09:09:34.000Z" }, { "id": 153309, "urlhaus_id": "3943063", "url": "https://github.com/Osbornefrozen840/esp-smoltcp/raw/refs/heads/main/components/esp_smoltcp/smoltcp-esp-3.4-beta.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:31 UTC", "discovered_at": "2026-10-06T09:09:31.000Z" }, { "id": 153310, "urlhaus_id": "3943062", "url": "https://github.com/Pac-Man-PT/lj-inventory/raw/refs/heads/main/html/css/inventory-lj-3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:29 UTC", "discovered_at": "2026-10-06T09:09:29.000Z" }, { "id": 153316, "urlhaus_id": "3943056", "url": "https://github.com/joshualegado008/academe-student-app/raw/refs/heads/main/src/views/app_student_academe_v1.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:28 UTC", "discovered_at": "2026-10-06T09:09:28.000Z" }, { "id": 153315, "urlhaus_id": "3943057", "url": "https://raw.githubusercontent.com/rafafsantos30-lab/S.a.B-King-Instant-Steal-white-list-Jubileu_dasParada/main/tetracoccus/v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:28 UTC", "discovered_at": "2026-10-06T09:09:28.000Z" }, { "id": 153314, "urlhaus_id": "3943058", "url": "https://raw.githubusercontent.com/Lavanthi/Escape-From-Kingdom-Velmoria-Lavanthi-/main/lucrative/Escape_From_Kingdom_Lavanthi_Velmoria_v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:28 UTC", "discovered_at": "2026-10-06T09:09:28.000Z" }, { "id": 153313, "urlhaus_id": "3943059", "url": "https://raw.githubusercontent.com/8070anurag/Docs/main/src/Software_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:28 UTC", "discovered_at": "2026-10-06T09:09:28.000Z" }, { "id": 153312, "urlhaus_id": "3943060", "url": "https://raw.githubusercontent.com/Shikayunamya/IEEE-Java-Project-list-/main/clinopyroxene/Java_Project_list_IEE_1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:28 UTC", "discovered_at": "2026-10-06T09:09:28.000Z" }, { "id": 153311, "urlhaus_id": "3943061", "url": "https://github.com/Subhopriyo/Raindrops/raw/refs/heads/master/scapulovertebral/Software_2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:28 UTC", "discovered_at": "2026-10-06T09:09:28.000Z" }, { "id": 153317, "urlhaus_id": "3943055", "url": "https://raw.githubusercontent.com/hababi558/class-21/main/frighter/class-21-2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:25 UTC", "discovered_at": "2026-10-06T09:09:25.000Z" }, { "id": 153319, "urlhaus_id": "3943053", "url": "https://raw.githubusercontent.com/DreamlandSR/dev_tools_hub/main/generateFiles/dev-tools-hub-3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:24 UTC", "discovered_at": "2026-10-06T09:09:24.000Z" }, { "id": 153318, "urlhaus_id": "3943054", "url": "https://github.com/CodeWithMamoon/Blockchain-Project/raw/refs/heads/main/src/prisma/Blockchain-Project-3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:24 UTC", "discovered_at": "2026-10-06T09:09:24.000Z" }, { "id": 153321, "urlhaus_id": "3943051", "url": "https://raw.githubusercontent.com/Nogame154/bee-swarm-simulator-legacy-toolkit/branch/centerable/bee-legacy-swarm-simulator-toolkit-1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:22 UTC", "discovered_at": "2026-10-06T09:09:22.000Z" }, { "id": 153320, "urlhaus_id": "3943052", "url": "https://raw.githubusercontent.com/rafafsantos30-lab/S.a.B-King-Instant-Steal-whitelist-Jubileu_dasParada-by-tiodaesfiha_79813/main/inauspicious/v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:22 UTC", "discovered_at": "2026-10-06T09:09:22.000Z" }, { "id": 153322, "urlhaus_id": "3943050", "url": "https://github.com/JasperValdez/Part-2/raw/refs/heads/main/public/Part-neuronymy.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:21 UTC", "discovered_at": "2026-10-06T09:09:21.000Z" }, { "id": 153326, "urlhaus_id": "3943046", "url": "https://raw.githubusercontent.com/KindaJayant/expense-tracker/main/src/components/expense-tracker-loxia.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:18 UTC", "discovered_at": "2026-10-06T09:09:18.000Z" }, { "id": 153325, "urlhaus_id": "3943047", "url": "https://raw.githubusercontent.com/jiggly1/Smart-Driver-Care-Pro-1.1.0.5280/main/colonitis/Smart_Pro_Driver_Care_3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:18 UTC", "discovered_at": "2026-10-06T09:09:18.000Z" }, { "id": 153324, "urlhaus_id": "3943048", "url": "https://raw.githubusercontent.com/NandanaRajesh25/Restaurant-menu-manager_Tink-Her-Hack/main/frontend/src/components/Header/menu_Restaurant_manager_Hack_Her_Tink_mechanicalist.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:18 UTC", "discovered_at": "2026-10-06T09:09:18.000Z" }, { "id": 153323, "urlhaus_id": "3943049", "url": "https://raw.githubusercontent.com/JasperValdez/My-Portfolio/main/src/My_Portfolio_1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:18 UTC", "discovered_at": "2026-10-06T09:09:18.000Z" }, { "id": 153329, "urlhaus_id": "3943043", "url": "https://raw.githubusercontent.com/benitauncompartmented1891/qr-scanner-generator/main/android-app/app/src/main/java/com/itisuniqueofficial/qr-scanner-generator-piccalilli.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:17 UTC", "discovered_at": "2026-10-06T09:09:17.000Z" }, { "id": 153328, "urlhaus_id": "3943044", "url": "https://raw.githubusercontent.com/K-T-design/Aviz/main/android/app/.cxx/Debug/4572331t/x86/CMakeFiles/3.22.1-g37088a8-dirty/Software-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:17 UTC", "discovered_at": "2026-10-06T09:09:17.000Z" }, { "id": 153327, "urlhaus_id": "3943045", "url": "https://raw.githubusercontent.com/M4z-1ful/KCDeliverance2-Deathbrink-Toolkit/main/Cowperian/KCDeliverance2-Deathbrink-Toolkit.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:17 UTC", "discovered_at": "2026-10-06T09:09:17.000Z" }, { "id": 153331, "urlhaus_id": "3943041", "url": "https://raw.githubusercontent.com/GIZZN/VinylPlug-/main/graphometer/VinylPlug-.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:16 UTC", "discovered_at": "2026-10-06T09:09:16.000Z" }, { "id": 153330, "urlhaus_id": "3943042", "url": "https://raw.githubusercontent.com/Pinquei/BLE_scanner/master/templates/scanner-BL-mesoblastema.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:16 UTC", "discovered_at": "2026-10-06T09:09:16.000Z" }, { "id": 153337, "urlhaus_id": "3943035", "url": "https://github.com/jourdaninorder609/mind-query/raw/refs/heads/main/src/infrastructure/llm/mind-query-v1.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:15 UTC", "discovered_at": "2026-10-06T09:09:15.000Z" }, { "id": 153336, "urlhaus_id": "3943036", "url": "https://raw.githubusercontent.com/royalessential356/LCE-Emerald-Launcher/main/Sources/Launcher-Emerald-LC-v2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:15 UTC", "discovered_at": "2026-10-06T09:09:15.000Z" }, { "id": 153335, "urlhaus_id": "3943037", "url": "https://github.com/Ashikparvez89/simple-crud-client/raw/refs/heads/main/src/simple_crud_client_3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:15 UTC", "discovered_at": "2026-10-06T09:09:15.000Z" }, { "id": 153334, "urlhaus_id": "3943038", "url": "https://raw.githubusercontent.com/rl9blake/Nsnsmendn/main/additamentary/Software-intense.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:15 UTC", "discovered_at": "2026-10-06T09:09:15.000Z" }, { "id": 153333, "urlhaus_id": "3943039", "url": "https://raw.githubusercontent.com/Shevin0147/shevin0147.github.io/main/.opencode/skills/openspec-sync-specs/Release_1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:15 UTC", "discovered_at": "2026-10-06T09:09:15.000Z" }, { "id": 153332, "urlhaus_id": "3943040", "url": "https://raw.githubusercontent.com/mhmdsatria/GrahaArutala/main/tests/Feature/Graha_Arutala_v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:15 UTC", "discovered_at": "2026-10-06T09:09:15.000Z" }, { "id": 153352, "urlhaus_id": "3943020", "url": "https://github.com/lemurhacep/sssssd/raw/refs/heads/main/cheat/src/events/joins/Software-2.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153351, "urlhaus_id": "3943021", "url": "https://github.com/winfieldmassspectroscopic818/Vflux/raw/refs/heads/main/examples/icesugar-pro-blinky/src/Software-v1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153350, "urlhaus_id": "3943022", "url": "https://raw.githubusercontent.com/omurkoc/enhanced-sentiment-analysis/main/moosebush/analysis-sentiment-enhanced-v1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153349, "urlhaus_id": "3943023", "url": "https://github.com/Nur84/datatables/raw/refs/heads/main/Anoplonemertini/Software_3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153348, "urlhaus_id": "3943024", "url": "https://github.com/hackerboy00/Rust-force-hck/raw/refs/heads/main/werewolfism/Rust_hck_force_1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153347, "urlhaus_id": "3943025", "url": "https://github.com/Ranatarahumaraefoot475/Mina-The-Hollower-Release/raw/refs/heads/main/sources/Hollower_Mina_The_Release_v1.9-alpha.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153346, "urlhaus_id": "3943026", "url": "https://github.com/kalyanijawalekar/PresentationKit/raw/refs/heads/main/Demo/Demo/Assets.xcassets/AppIcon.appiconset/Presentation_Kit_v1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153345, "urlhaus_id": "3943027", "url": "https://github.com/lpr021/my-app/raw/refs/heads/main/src/styles/my-app-1.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153344, "urlhaus_id": "3943028", "url": "https://github.com/khn0x-khn0x/sui-bitcoin-spv/raw/refs/heads/master/tests/bitcoin-spv-sui-Onondagan.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153343, "urlhaus_id": "3943029", "url": "https://github.com/NatanRRocha/carneiroshidraulicos100/raw/refs/heads/main/public/carneiroshidraulicos_asthenopic.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153342, "urlhaus_id": "3943030", "url": "https://github.com/Shoaibxaif/expense-tracker/raw/refs/heads/main/src/expense_tracker_1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153341, "urlhaus_id": "3943031", "url": "https://github.com/engineerbishnu/laravel-todolist-api-main/raw/refs/heads/main/vendor/phpunit/phpunit/src/Metadata/Parser/main_api_laravel_todolist_v1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153340, "urlhaus_id": "3943032", "url": "https://github.com/iamdeepkr/portfolio/raw/refs/heads/main/src/assets/logo/Software_2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153339, "urlhaus_id": "3943033", "url": "https://github.com/yasin9064/imagin_ai/raw/refs/heads/main/linux/runner/imagin_ai_v1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153338, "urlhaus_id": "3943034", "url": "https://github.com/fatinzark-stack/Flowise/raw/refs/heads/main/packages/components/nodes/chains/RetrievalQAChain/Software_3.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:14 UTC", "discovered_at": "2026-10-06T09:09:14.000Z" }, { "id": 153354, "urlhaus_id": "3943018", "url": "https://github.com/maomaoguo89-star/FIFMAMAOMAODEAIAPP/raw/refs/heads/main/endotheliomyoma/Software-v1.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:13 UTC", "discovered_at": "2026-10-06T09:09:13.000Z" }, { "id": 153353, "urlhaus_id": "3943019", "url": "https://github.com/sherali01/Design-Pattens-in-OOPS/raw/refs/heads/master/android/app/src/main/res/drawable-v21/in_OOPS_Design_Pattens_v2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:13 UTC", "discovered_at": "2026-10-06T09:09:13.000Z" }, { "id": 153356, "urlhaus_id": "3943016", "url": "https://github.com/BinNguye/s2pk/raw/refs/heads/main/AppDir/s_pk_3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:11 UTC", "discovered_at": "2026-10-06T09:09:11.000Z" }, { "id": 153355, "urlhaus_id": "3943017", "url": "https://github.com/Selvaprakash-Ramalingam/Retrieval-Augmented-Generation-Agricultural-TexT/raw/refs/heads/main/unnethis/Generation_Agricultural_Tex_T_Retrieval_Augmented_3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:09:11 UTC", "discovered_at": "2026-10-06T09:09:11.000Z" }, { "id": 153359, "urlhaus_id": "3943013", "url": "https://raw.githubusercontent.com/mibrahiim786/art-gallery-simulator-roblox-toolkit/branch/nanosoma/art_roblox_toolkit_simulator_gallery_1.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:59 UTC", "discovered_at": "2026-10-06T09:08:59.000Z" }, { "id": 153358, "urlhaus_id": "3943014", "url": "https://raw.githubusercontent.com/muhammadali832/Login-Page/main/overborrow/Login-Page.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:59 UTC", "discovered_at": "2026-10-06T09:08:59.000Z" }, { "id": 153357, "urlhaus_id": "3943015", "url": "https://github.com/ProjectMunnoi/FM_1/raw/refs/heads/main/images/F_v1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:59 UTC", "discovered_at": "2026-10-06T09:08:59.000Z" }, { "id": 153364, "urlhaus_id": "3943008", "url": "https://github.com/Mohamedfat7i/My-Projects/raw/refs/heads/master/palilogy/My-Projects-2.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:58 UTC", "discovered_at": "2026-10-06T09:08:58.000Z" }, { "id": 153363, "urlhaus_id": "3943009", "url": "https://github.com/Hydro1986/deltarune-trainer-toolkit/raw/refs/heads/branch/diketone/deltarune_trainer_toolkit_v2.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:58 UTC", "discovered_at": "2026-10-06T09:08:58.000Z" }, { "id": 153362, "urlhaus_id": "3943010", "url": "https://raw.githubusercontent.com/joaquincanete/test01/master/.vscode/test_2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:58 UTC", "discovered_at": "2026-10-06T09:08:58.000Z" }, { "id": 153361, "urlhaus_id": "3943011", "url": "https://raw.githubusercontent.com/andry06/si-mesin/master/biliteralism/si-mesin.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:58 UTC", "discovered_at": "2026-10-06T09:08:58.000Z" }, { "id": 153360, "urlhaus_id": "3943012", "url": "https://raw.githubusercontent.com/analyst-ujjwal/Ai_project_11/main/utils/project-Ai-2.3.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:58 UTC", "discovered_at": "2026-10-06T09:08:58.000Z" }, { "id": 153372, "urlhaus_id": "3943000", "url": "https://github.com/JasperValdez/Activity-3---Task-App-Router/raw/refs/heads/main/public/Router-Task-Activity-App-Abu.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153371, "urlhaus_id": "3943001", "url": "https://github.com/Shavan889/UI-/raw/refs/heads/main/src/U_v1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153370, "urlhaus_id": "3943002", "url": "https://github.com/ultf/shadowsocks-tunnel-install/raw/refs/heads/main/fauterer/install-shadowsocks-tunnel-v3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153369, "urlhaus_id": "3943003", "url": "https://raw.githubusercontent.com/Olathedevguy/Manage-omega/main/src/design/Manage-omega-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153368, "urlhaus_id": "3943004", "url": "https://github.com/LautaroFrias/Planet-Burger-React-/raw/refs/heads/main/src/components/NavBar/Burger-Planet-React-2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153367, "urlhaus_id": "3943005", "url": "https://github.com/KotadiyaJaydeep/Store_Sample_Design_Optimization/raw/refs/heads/main/bool/Sample-Design-Optimization-Store-3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153366, "urlhaus_id": "3943006", "url": "https://github.com/Gajendrakmt9079/Personal-portfolio/raw/refs/heads/master/src/assets/portfolio_Personal_2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153365, "urlhaus_id": "3943007", "url": "https://github.com/Fe4rlessxD/Quieres-ser-mi-nobia-7w7/raw/refs/heads/master/trenchlet/ser_w_mi_nobia_Quieres_1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:57 UTC", "discovered_at": "2026-10-06T09:08:57.000Z" }, { "id": 153374, "urlhaus_id": "3942998", "url": "https://github.com/03Anmol/Image_matching/raw/refs/heads/main/src/matching-Image-v3.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:55 UTC", "discovered_at": "2026-10-06T09:08:55.000Z" }, { "id": 153373, "urlhaus_id": "3942999", "url": "https://github.com/8070anurag/accessibility/raw/refs/heads/main/src/components/Page404/Software-Rhodian.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:55 UTC", "discovered_at": "2026-10-06T09:08:55.000Z" }, { "id": 153378, "urlhaus_id": "3942994", "url": "https://raw.githubusercontent.com/andreaignazio/asset-manager-fullstack/main/frontend/core_frontend/src/components/icons/asset-manager-fullstack-v2.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:54 UTC", "discovered_at": "2026-10-06T09:08:54.000Z" }, { "id": 153377, "urlhaus_id": "3942995", "url": "https://raw.githubusercontent.com/Miqman/Collection_Anime/main/anime-info/src/config/Collection-Anime-3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:54 UTC", "discovered_at": "2026-10-06T09:08:54.000Z" }, { "id": 153376, "urlhaus_id": "3942996", "url": "https://raw.githubusercontent.com/Shaikhershad/Bulk-Image-Downloader-Free/main/variolic/Bulk_Downloader_Free_Image_3.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:54 UTC", "discovered_at": "2026-10-06T09:08:54.000Z" }, { "id": 153375, "urlhaus_id": "3942997", "url": "https://raw.githubusercontent.com/ghost02380/koikatsu-party-starter-pack/branch/ambitus/pack-koikatsu-starter-party-1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:54 UTC", "discovered_at": "2026-10-06T09:08:54.000Z" }, { "id": 153380, "urlhaus_id": "3942992", "url": "https://github.com/rgoldr88/dispoflaress/raw/refs/heads/main/.design/cloudflare-icons/Software-v2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:53 UTC", "discovered_at": "2026-10-06T09:08:53.000Z" }, { "id": 153379, "urlhaus_id": "3942993", "url": "https://raw.githubusercontent.com/BVNAHUSH/Fashion-Recommender-System-for-Women/main/squamify/Fashion-Women-Recommender-for-System-v3.6.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:53 UTC", "discovered_at": "2026-10-06T09:08:53.000Z" }, { "id": 153383, "urlhaus_id": "3942989", "url": "https://github.com/AslinaBegam-N/Intern-project/raw/refs/heads/master/src/context/Intern-project-v2.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:52 UTC", "discovered_at": "2026-10-06T09:08:52.000Z" }, { "id": 153382, "urlhaus_id": "3942990", "url": "https://github.com/goodnesskalu/marine-debris.github.io/raw/refs/heads/main/docs/marine_github_io_debris_v1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:52 UTC", "discovered_at": "2026-10-06T09:08:52.000Z" }, { "id": 153381, "urlhaus_id": "3942991", "url": "https://github.com/hiteknodeposit20241/autonomous-gemini-release-manager/raw/refs/heads/main/backend/src/websockets/manager-release-autonomous-gemini-v3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:52 UTC", "discovered_at": "2026-10-06T09:08:52.000Z" }, { "id": 153386, "urlhaus_id": "3942986", "url": "https://github.com/Eniitanire/ITProject/raw/refs/heads/main/images/IT_Project_2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:51 UTC", "discovered_at": "2026-10-06T09:08:51.000Z" }, { "id": 153385, "urlhaus_id": "3942987", "url": "https://raw.githubusercontent.com/kakaum2k/Music-Recommendation-Based-on-Facial-Expression/main/feckless/Based_Recommendation_Facial_Expression_on_Music_v2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:51 UTC", "discovered_at": "2026-10-06T09:08:51.000Z" }, { "id": 153384, "urlhaus_id": "3942988", "url": "https://raw.githubusercontent.com/willsondev/editor-colaborativo/main/ambidexter/editor-colaborativo.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:51 UTC", "discovered_at": "2026-10-06T09:08:51.000Z" }, { "id": 153390, "urlhaus_id": "3942982", "url": "https://raw.githubusercontent.com/Srilaxman05/Student-management-system/main/Dichapetalum/management_system_Student_v1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:47 UTC", "discovered_at": "2026-10-06T09:08:47.000Z" }, { "id": 153389, "urlhaus_id": "3942983", "url": "https://raw.githubusercontent.com/hoangkhiem112/kale-text-editor/main/seraphism/editor_kale_text_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:47 UTC", "discovered_at": "2026-10-06T09:08:47.000Z" }, { "id": 153388, "urlhaus_id": "3942984", "url": "https://raw.githubusercontent.com/Janani1625/emotion-music-recommender/main/screenshots/recommender-emotion-music-v3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:47 UTC", "discovered_at": "2026-10-06T09:08:47.000Z" }, { "id": 153387, "urlhaus_id": "3942985", "url": "https://raw.githubusercontent.com/willsondev/frontend-arqueria-vue/main/downwith/frontend-arqueria-vue.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:47 UTC", "discovered_at": "2026-10-06T09:08:47.000Z" }, { "id": 153397, "urlhaus_id": "3942975", "url": "https://github.com/karbine98kz/VectorPi/raw/refs/heads/main/app/components/Login/Vector-Pi-3.1.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:46 UTC", "discovered_at": "2026-10-06T09:08:46.000Z" }, { "id": 153396, "urlhaus_id": "3942976", "url": "https://github.com/yongsinfok/boyfriendCamera/raw/refs/heads/main/src/Camera_boyfriend_v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:46 UTC", "discovered_at": "2026-10-06T09:08:46.000Z" }, { "id": 153395, "urlhaus_id": "3942977", "url": "https://raw.githubusercontent.com/lamaSonmez/ny-times-app/main/src/app/modules/core/material/ny-times-app-v3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:46 UTC", "discovered_at": "2026-10-06T09:08:46.000Z" }, { "id": 153394, "urlhaus_id": "3942978", "url": "https://github.com/radiographic-uncle4030/duh/raw/refs/heads/main/verumontanum/Software-1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:46 UTC", "discovered_at": "2026-10-06T09:08:46.000Z" }, { "id": 153393, "urlhaus_id": "3942979", "url": "https://github.com/khn0x-khn0x/sui-native/raw/refs/heads/master/nbtc_swap/docs/sui-native-3.8.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:46 UTC", "discovered_at": "2026-10-06T09:08:46.000Z" }, { "id": 153392, "urlhaus_id": "3942980", "url": "https://raw.githubusercontent.com/Omkar675/Fraud-Detection-System/main/gablewise/Detection_System_Fraud_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:46 UTC", "discovered_at": "2026-10-06T09:08:46.000Z" }, { "id": 153391, "urlhaus_id": "3942981", "url": "https://raw.githubusercontent.com/nejomeme/product-api/main/.github/api-product-v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:46 UTC", "discovered_at": "2026-10-06T09:08:46.000Z" }, { "id": 153401, "urlhaus_id": "3942971", "url": "https://raw.githubusercontent.com/prodot-com/Internship1/main/src/Component/Navbar/Internship_2.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:45 UTC", "discovered_at": "2026-10-06T09:08:45.000Z" }, { "id": 153400, "urlhaus_id": "3942972", "url": "https://github.com/eldricc/pyenv-inspector/raw/refs/heads/main/psychopompos/inspector-pyenv-1.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:45 UTC", "discovered_at": "2026-10-06T09:08:45.000Z" }, { "id": 153399, "urlhaus_id": "3942973", "url": "https://github.com/hunsulkaab66/hunsulkaab66/raw/refs/heads/main/indisposedness/hunsulkaab-v1.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:45 UTC", "discovered_at": "2026-10-06T09:08:45.000Z" }, { "id": 153398, "urlhaus_id": "3942974", "url": "https://raw.githubusercontent.com/iadnan21/git_exercise/master/serialize/git-exercise-v2.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:45 UTC", "discovered_at": "2026-10-06T09:08:45.000Z" }, { "id": 153404, "urlhaus_id": "3942968", "url": "https://raw.githubusercontent.com/GilJames/kdcarrental/master/public/new_cardetails/scss/bootstrap/vendor/Software-3.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:44 UTC", "discovered_at": "2026-10-06T09:08:44.000Z" }, { "id": 153403, "urlhaus_id": "3942969", "url": "https://raw.githubusercontent.com/bs779517/GramTalk02/main/src/app/new-group/Gram-Talk-tryptic.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:44 UTC", "discovered_at": "2026-10-06T09:08:44.000Z" }, { "id": 153402, "urlhaus_id": "3942970", "url": "https://github.com/liooktoo288-pixel/WebReverseMCP/raw/refs/heads/main/browser/browser-engine/src/main/assets/wabt/1.9-beta.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:44 UTC", "discovered_at": "2026-10-06T09:08:44.000Z" }, { "id": 153407, "urlhaus_id": "3942965", "url": "https://github.com/Ch1n3x1/2025_ProyectoParcial_V2/raw/refs/heads/main/src/pages/Parcial-Proyecto-1.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:43 UTC", "discovered_at": "2026-10-06T09:08:43.000Z" }, { "id": 153406, "urlhaus_id": "3942966", "url": "https://github.com/rishab-7701/Task_App/raw/refs/heads/master/addle/Task_App_v1.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:43 UTC", "discovered_at": "2026-10-06T09:08:43.000Z" }, { "id": 153405, "urlhaus_id": "3942967", "url": "https://github.com/wallyprintable180/qmdec/raw/refs/heads/main/assets/Software_2.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:43 UTC", "discovered_at": "2026-10-06T09:08:43.000Z" }, { "id": 153412, "urlhaus_id": "3942964", "url": "https://github.com/code-iddih/client_react_deploy/raw/refs/heads/master/src/react-deploy-client-v1.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:42 UTC", "discovered_at": "2026-10-06T09:08:42.000Z" }, { "id": 153411, "urlhaus_id": "3942963", "url": "https://github.com/DavidLabrin/claude_proxy/raw/refs/heads/main/src/claude-proxy-importunement.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:42 UTC", "discovered_at": "2026-10-06T09:08:42.000Z" }, { "id": 153410, "urlhaus_id": "3942962", "url": "https://raw.githubusercontent.com/Ikbenproz/driving-empire-roblox-script-hub/branch/pluripartite/empire-hub-roblox-script-driving-v3.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:42 UTC", "discovered_at": "2026-10-06T09:08:42.000Z" }, { "id": 153409, "urlhaus_id": "3942960", "url": "https://github.com/97-soubise836/lunarclientminecraft-windows-installer/raw/refs/heads/main/prointervention/windows-installer-lunarclientminecraft-2.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:42 UTC", "discovered_at": "2026-10-06T09:08:42.000Z" }, { "id": 153408, "urlhaus_id": "3942961", "url": "https://raw.githubusercontent.com/DraksSounds/AI-LEGO-Pinball-Bot/main/externalFiles/A_Pinball_LEG_Bot_v3.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:42 UTC", "discovered_at": "2026-10-06T09:08:42.000Z" }, { "id": 153417, "urlhaus_id": "3942955", "url": "https://raw.githubusercontent.com/Hamloli/DiskDeviceInfo/main/gddTest/Disk-Info-Device-1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:39 UTC", "discovered_at": "2026-10-06T09:08:39.000Z" }, { "id": 153416, "urlhaus_id": "3942956", "url": "https://raw.githubusercontent.com/mrDani/frontendtest/main/src/actions/frontendtest_v1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:39 UTC", "discovered_at": "2026-10-06T09:08:39.000Z" }, { "id": 153415, "urlhaus_id": "3942957", "url": "https://raw.githubusercontent.com/IT-HARISH-R/Event-Management-from-end/main/src/Store/Event-Management-from-end-1.2.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:39 UTC", "discovered_at": "2026-10-06T09:08:39.000Z" }, { "id": 153414, "urlhaus_id": "3942958", "url": "https://raw.githubusercontent.com/vctor03/vctor03/main/.github/vctor-v2.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:39 UTC", "discovered_at": "2026-10-06T09:08:39.000Z" }, { "id": 153413, "urlhaus_id": "3942959", "url": "https://raw.githubusercontent.com/bhuwan070/Ecommerce/master/public/Software-1.0-beta.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:39 UTC", "discovered_at": "2026-10-06T09:08:39.000Z" }, { "id": 153419, "urlhaus_id": "3942953", "url": "https://github.com/StanLeyJ03/mcp-for-security/raw/refs/heads/main/nmap-mcp/src/for-security-mcp-3.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:38 UTC", "discovered_at": "2026-10-06T09:08:38.000Z" }, { "id": 153418, "urlhaus_id": "3942954", "url": "https://github.com/SenSeiSGS/FasoMovies/raw/refs/heads/main/build/app/intermediates/incremental/debug/mergeDebugResources/merged.dir/values-vi/Faso_Movies_springly.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:38 UTC", "discovered_at": "2026-10-06T09:08:38.000Z" }, { "id": 153420, "urlhaus_id": "3942952", "url": "https://github.com/panzerking99267/MailComboExtractor/raw/refs/heads/main/mollifying/Extractor-Combo-Mail-v3.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:37 UTC", "discovered_at": "2026-10-06T09:08:37.000Z" }, { "id": 153421, "urlhaus_id": "3942951", "url": "https://github.com/jonathanmutu2005/ML/raw/refs/heads/main/physiochemical/Software-1.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:36 UTC", "discovered_at": "2026-10-06T09:08:36.000Z" }, { "id": 153427, "urlhaus_id": "3942945", "url": "https://raw.githubusercontent.com/ashish8485/talkink/main/Sources/SoyleKit/Software-v1.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:34 UTC", "discovered_at": "2026-10-06T09:08:34.000Z" }, { "id": 153426, "urlhaus_id": "3942946", "url": "https://raw.githubusercontent.com/Gajaa-Azhura/Reactworksheet6.2/master/src/assets/Reactworksheet_3.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:34 UTC", "discovered_at": "2026-10-06T09:08:34.000Z" }, { "id": 153425, "urlhaus_id": "3942947", "url": "https://raw.githubusercontent.com/Harbor19/OpenAI-article-summarizer/master/src/assets/article_A_summarizer_Open_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:34 UTC", "discovered_at": "2026-10-06T09:08:34.000Z" }, { "id": 153424, "urlhaus_id": "3942948", "url": "https://github.com/Erenluffy/Fbbb/raw/refs/heads/main/plugins/Software_Therapsida.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:34 UTC", "discovered_at": "2026-10-06T09:08:34.000Z" }, { "id": 153423, "urlhaus_id": "3942949", "url": "https://raw.githubusercontent.com/Kawanzi/astro-pixel-games/main/src/components/ui/astro-pixel-games_v3.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:34 UTC", "discovered_at": "2026-10-06T09:08:34.000Z" }, { "id": 153422, "urlhaus_id": "3942950", "url": "https://raw.githubusercontent.com/micrometeoric-eye978/academic-research-skills/main/participatingly/research-academic-skills-leucitohedron.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:34 UTC", "discovered_at": "2026-10-06T09:08:34.000Z" }, { "id": 153429, "urlhaus_id": "3942943", "url": "https://raw.githubusercontent.com/taraldesai10/park_here/main/ios/Runner.xcodeproj/project.xcworkspace/xcshareddata/here-park-v2.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:33 UTC", "discovered_at": "2026-10-06T09:08:33.000Z" }, { "id": 153428, "urlhaus_id": "3942944", "url": "https://raw.githubusercontent.com/Dhacks-png/Knightbot-MD/main/session/Knightbot_MD_v2.6-alpha.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:33 UTC", "discovered_at": "2026-10-06T09:08:33.000Z" }, { "id": 153434, "urlhaus_id": "3942938", "url": "https://github.com/carteldem5907/vibe-tuning/raw/refs/heads/main/references/vibe-tuning-shepherdess.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:32 UTC", "discovered_at": "2026-10-06T09:08:32.000Z" }, { "id": 153433, "urlhaus_id": "3942939", "url": "https://github.com/purribd8/BA_customer_reviews/raw/refs/heads/main/trousseau/B-reviews-customer-v2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:32 UTC", "discovered_at": "2026-10-06T09:08:32.000Z" }, { "id": 153432, "urlhaus_id": "3942940", "url": "https://raw.githubusercontent.com/eibrunodev/app/master/src/Pages/Promotions/Software_2.9.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:32 UTC", "discovered_at": "2026-10-06T09:08:32.000Z" }, { "id": 153431, "urlhaus_id": "3942941", "url": "https://github.com/2534Nicolle/Atv_imc/raw/refs/heads/main/android/app/src/main/kotlin/com/Atv-imc-v2.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:32 UTC", "discovered_at": "2026-10-06T09:08:32.000Z" }, { "id": 153430, "urlhaus_id": "3942942", "url": "https://raw.githubusercontent.com/Golu0512/my_website/main/src/components/website_my_1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:32 UTC", "discovered_at": "2026-10-06T09:08:32.000Z" }, { "id": 153438, "urlhaus_id": "3942934", "url": "https://github.com/Openplan-pricklyedgedleaf841/MacKV-Opt/raw/refs/heads/main/scripts/Mac-Opt-K-unrubified.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:31 UTC", "discovered_at": "2026-10-06T09:08:31.000Z" }, { "id": 153437, "urlhaus_id": "3942935", "url": "https://github.com/josemanuelm9203/rumi/raw/refs/heads/main/Vendean/Software_v3.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:31 UTC", "discovered_at": "2026-10-06T09:08:31.000Z" }, { "id": 153436, "urlhaus_id": "3942936", "url": "https://github.com/Perpaft11/ea-sports-college-football-25-save-crafter/raw/refs/heads/branch/incudostapedial/crafter_college_sports_save_ea_football_1.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:31 UTC", "discovered_at": "2026-10-06T09:08:31.000Z" }, { "id": 153435, "urlhaus_id": "3942937", "url": "https://github.com/Budrendition792/WindowsDelta/raw/refs/heads/main/cocreatorship/Windows-Delta-v2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:31 UTC", "discovered_at": "2026-10-06T09:08:31.000Z" }, { "id": 153443, "urlhaus_id": "3942933", "url": "https://raw.githubusercontent.com/iqbaldiit/BigDataQnA/main/sickbed/A-Big-Qn-Data-2.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:30 UTC", "discovered_at": "2026-10-06T09:08:30.000Z" }, { "id": 153442, "urlhaus_id": "3942931", "url": "https://raw.githubusercontent.com/SivaAkm/MyPortFolio/main/public/MyPortFolio_v1.4.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:30 UTC", "discovered_at": "2026-10-06T09:08:30.000Z" }, { "id": 153441, "urlhaus_id": "3942930", "url": "https://raw.githubusercontent.com/Shubham60019/Netflix-clone/main/src/Assets/clone_Netflix_1.0.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:30 UTC", "discovered_at": "2026-10-06T09:08:30.000Z" }, { "id": 153440, "urlhaus_id": "3942929", "url": "https://raw.githubusercontent.com/Shrief-Salama/riskcare/main/src/Pages/Software-recitalist.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:30 UTC", "discovered_at": "2026-10-06T09:08:30.000Z" }, { "id": 153439, "urlhaus_id": "3942932", "url": "https://raw.githubusercontent.com/Shashwat970/oap_start_stop/main/gnathic/oap_start_stop_1.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:30 UTC", "discovered_at": "2026-10-06T09:08:30.000Z" }, { "id": 153445, "urlhaus_id": "3942927", "url": "https://github.com/Kassiwaning586/yargi-pro-gemma-local/raw/refs/heads/main/docs/gemma-yargi-local-pro-v2.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:29 UTC", "discovered_at": "2026-10-06T09:08:29.000Z" }, { "id": 153444, "urlhaus_id": "3942928", "url": "https://github.com/shreyanxNova/RKNHardering/raw/refs/heads/main/gnathostome/Hardering-RKN-v2.6.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:29 UTC", "discovered_at": "2026-10-06T09:08:29.000Z" }, { "id": 153449, "urlhaus_id": "3942923", "url": "https://raw.githubusercontent.com/VM-Janani/Stone-Segmentation/main/dentinocemental/Stone-Segmentation.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:28 UTC", "discovered_at": "2026-10-06T09:08:28.000Z" }, { "id": 153448, "urlhaus_id": "3942924", "url": "https://github.com/0Milovke0UwU0/dst-survival-toolkit/raw/refs/heads/branch/unwrestedly/toolkit-dst-survival-1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:28 UTC", "discovered_at": "2026-10-06T09:08:28.000Z" }, { "id": 153447, "urlhaus_id": "3942925", "url": "https://raw.githubusercontent.com/hirunjinadasa/villagerhapsody-open-access-edition/branch/opsonification/access_villagerhapsody_open_edition_2.5.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:28 UTC", "discovered_at": "2026-10-06T09:08:28.000Z" }, { "id": 153446, "urlhaus_id": "3942926", "url": "https://github.com/spookyy120-web/toxibr/raw/refs/heads/main/src/Software_v3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:28 UTC", "discovered_at": "2026-10-06T09:08:28.000Z" }, { "id": 153450, "urlhaus_id": "3942922", "url": "https://github.com/rgoldr88/openwrt-app-actions/raw/refs/heads/main/applications/luci-app-photoprism/root/actions-app-openwrt-3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:25 UTC", "discovered_at": "2026-10-06T09:08:25.000Z" }, { "id": 153452, "urlhaus_id": "3942920", "url": "https://raw.githubusercontent.com/MohamedElmogy25/XAI-Assignment-DL/main/fluochloride/Assignment-XA-DL-v3.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:24 UTC", "discovered_at": "2026-10-06T09:08:24.000Z" }, { "id": 153451, "urlhaus_id": "3942921", "url": "https://github.com/87870/Alchemist/raw/refs/heads/main/src/Helpers/Software-3.5.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:24 UTC", "discovered_at": "2026-10-06T09:08:24.000Z" }, { "id": 153453, "urlhaus_id": "3942919", "url": "https://raw.githubusercontent.com/abhijitkayal10/abhijitkayal10/main/cecilite/abhijitkayal-v1.8.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:23 UTC", "discovered_at": "2026-10-06T09:08:23.000Z" }, { "id": 153456, "urlhaus_id": "3942916", "url": "https://github.com/joseontiveros/color-palet/raw/refs/heads/main/src/components/Palette/palet-color-v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:22 UTC", "discovered_at": "2026-10-06T09:08:22.000Z" }, { "id": 153455, "urlhaus_id": "3942917", "url": "https://github.com/yasin9064/BMI_Calculator_Pro/raw/refs/heads/main/android/app/src/main/res/values-night/BM_Pro_Calculator_v3.0.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:22 UTC", "discovered_at": "2026-10-06T09:08:22.000Z" }, { "id": 153454, "urlhaus_id": "3942918", "url": "https://github.com/Sanithu16684/Calculator_Using_Flutter/raw/refs/heads/master/ios/Runner.xcworkspace/xcshareddata/Using_Calculator_Flutter_v3.7.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:22 UTC", "discovered_at": "2026-10-06T09:08:22.000Z" }, { "id": 153458, "urlhaus_id": "3942914", "url": "https://github.com/iamdeepkr/iamdeepkr.github.io/raw/refs/heads/main/src/assets/github-io-iamdeepkr-v3.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:21 UTC", "discovered_at": "2026-10-06T09:08:21.000Z" }, { "id": 153457, "urlhaus_id": "3942915", "url": "https://github.com/Ashikparvez89/DarkTheme/raw/refs/heads/main/src/pages/Dark-Theme-v1.4.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:21 UTC", "discovered_at": "2026-10-06T09:08:21.000Z" }, { "id": 153460, "urlhaus_id": "3942912", "url": "https://raw.githubusercontent.com/Jamsyut/alung-pra-ukk/main/public/alung-ukk-pra-1.7.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:20 UTC", "discovered_at": "2026-10-06T09:08:20.000Z" }, { "id": 153459, "urlhaus_id": "3942913", "url": "https://raw.githubusercontent.com/jeliasrm/ToDo/master/headland/Do_To_3.1.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:20 UTC", "discovered_at": "2026-10-06T09:08:20.000Z" }, { "id": 153462, "urlhaus_id": "3942910", "url": "https://github.com/averagerobloxplayerabove15/alumni-management-system/raw/refs/heads/main/yestermorning/alumni_management_system_v1.3.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:19 UTC", "discovered_at": "2026-10-06T09:08:19.000Z" }, { "id": 153461, "urlhaus_id": "3942911", "url": "https://github.com/rmnask2/pet-simulator-x-script-gm52/raw/refs/heads/main/homothallic/gm_simulator_script_pet_x_3.9.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:19 UTC", "discovered_at": "2026-10-06T09:08:19.000Z" }, { "id": 153463, "urlhaus_id": "3942909", "url": "https://raw.githubusercontent.com/newsprogramedwinduboishayward228/newsprogramedwinduboishayward228.github.io/main/static/css/Dist-embryophore.zip", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:17 UTC", "discovered_at": "2026-10-06T09:08:17.000Z" }, { "id": 153464, "urlhaus_id": "3942901", "url": "https://github.com/JohnDenverCandia/Candia-Midterm/raw/refs/heads/main/tests/Midterm_Candia_v1.2.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "github, LuaJIT-loader, SmartLoader, zip", "last_online": null, "first_seen": "2026-10-06 09:08:16 UTC", "discovered_at": "2026-10-06T09:08:16.000Z" }, { "id": 151465, "urlhaus_id": "3929434", "url": "http://27.205.104.122:42973/i", "host": "27.205.104.122", "host_ip": "27.205.104.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, Mozi", "last_online": null, "first_seen": "2026-10-05 18:58:15 UTC", "discovered_at": "2026-10-05T18:58:15.000Z" }, { "id": 151466, "urlhaus_id": "3929433", "url": "http://178.141.152.243:47468/bin.sh", "host": "178.141.152.243", "host_ip": "178.141.152.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 18:47:14 UTC", "discovered_at": "2026-10-05T18:47:14.000Z" }, { "id": 151469, "urlhaus_id": "3929432", "url": "http://113.221.26.99:47375/bin.sh", "host": "113.221.26.99", "host_ip": "113.221.26.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 18:47:13 UTC", "discovered_at": "2026-10-05T18:47:13.000Z" }, { "id": 151468, "urlhaus_id": "3929431", "url": "http://119.187.177.77:40993/i", "host": "119.187.177.77", "host_ip": "119.187.177.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 18:47:13 UTC", "discovered_at": "2026-10-05T18:47:13.000Z" }, { "id": 151467, "urlhaus_id": "3929430", "url": "http://115.61.116.106:48587/i", "host": "115.61.116.106", "host_ip": "115.61.116.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 18:47:13 UTC", "discovered_at": "2026-10-05T18:47:13.000Z" }, { "id": 151470, "urlhaus_id": "3929429", "url": "http://27.205.104.122:42973/bin.sh", "host": "27.205.104.122", "host_ip": "27.205.104.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 18:35:30 UTC", "discovered_at": "2026-10-05T18:35:30.000Z" }, { "id": 151473, "urlhaus_id": "3929428", "url": "http://123.130.63.21:48983/bin.sh", "host": "123.130.63.21", "host_ip": "123.130.63.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 18:17:16 UTC", "discovered_at": "2026-10-05T18:17:16.000Z" }, { "id": 151472, "urlhaus_id": "3929427", "url": "http://115.62.154.44:57183/i", "host": "115.62.154.44", "host_ip": "115.62.154.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 18:17:16 UTC", "discovered_at": "2026-10-05T18:17:16.000Z" }, { "id": 151471, "urlhaus_id": "3929426", "url": "http://123.130.63.21:48983/i", "host": "123.130.63.21", "host_ip": "123.130.63.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 18:17:16 UTC", "discovered_at": "2026-10-05T18:17:16.000Z" }, { "id": 151474, "urlhaus_id": "3929425", "url": "http://182.112.38.0:41326/bin.sh", "host": "182.112.38.0", "host_ip": "182.112.38.0", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 18:17:15 UTC", "discovered_at": "2026-10-05T18:17:15.000Z" }, { "id": 151475, "urlhaus_id": "3929424", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnarmv6lxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:10:25 UTC", "discovered_at": "2026-10-05T18:10:25.000Z" }, { "id": 151476, "urlhaus_id": "3929423", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxni686xnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:09:21 UTC", "discovered_at": "2026-10-05T18:09:21.000Z" }, { "id": 151478, "urlhaus_id": "3929422", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnarmv4lxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:25 UTC", "discovered_at": "2026-10-05T18:08:25.000Z" }, { "id": 151477, "urlhaus_id": "3929421", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:25 UTC", "discovered_at": "2026-10-05T18:08:25.000Z" }, { "id": 151481, "urlhaus_id": "3929420", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnsh4xnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:24 UTC", "discovered_at": "2026-10-05T18:08:24.000Z" }, { "id": 151480, "urlhaus_id": "3929419", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnmipselxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:24 UTC", "discovered_at": "2026-10-05T18:08:24.000Z" }, { "id": 151479, "urlhaus_id": "3929418", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnmipsxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:24 UTC", "discovered_at": "2026-10-05T18:08:24.000Z" }, { "id": 151487, "urlhaus_id": "3929417", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxni586xnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:21 UTC", "discovered_at": "2026-10-05T18:08:21.000Z" }, { "id": 151486, "urlhaus_id": "3929416", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnarmv5lxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:21 UTC", "discovered_at": "2026-10-05T18:08:21.000Z" }, { "id": 151485, "urlhaus_id": "3929415", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnm68kxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:21 UTC", "discovered_at": "2026-10-05T18:08:21.000Z" }, { "id": 151484, "urlhaus_id": "3929414", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnpowerpc440fpxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:21 UTC", "discovered_at": "2026-10-05T18:08:21.000Z" }, { "id": 151483, "urlhaus_id": "3929413", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnarmv7lxnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:21 UTC", "discovered_at": "2026-10-05T18:08:21.000Z" }, { "id": 151482, "urlhaus_id": "3929412", "url": "http://176.65.139.139/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 18:08:21 UTC", "discovered_at": "2026-10-05T18:08:21.000Z" }, { "id": 151489, "urlhaus_id": "3929411", "url": "http://123.8.51.124:39954/i", "host": "123.8.51.124", "host_ip": "123.8.51.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-05 18:07:26 UTC", "discovered_at": "2026-10-05T18:07:26.000Z" }, { "id": 151488, "urlhaus_id": "3929410", "url": "http://120.237.77.200:48222/i", "host": "120.237.77.200", "host_ip": "120.237.77.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-05 18:07:26 UTC", "discovered_at": "2026-10-05T18:07:26.000Z" }, { "id": 151490, "urlhaus_id": "3929409", "url": "https://cdn.discordapp.com/attachments/1182947418598289418/1556723625334153236/bundle.zip?ex=6ac5335a&is=6ac3e1da&hm=99e0ea109bb220f9675d652ca1f0963fad943aafbfe2413ca8ba1113de6e56de&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-05 18:02:40 UTC", "discovered_at": "2026-10-05T18:02:40.000Z" }, { "id": 151491, "urlhaus_id": "3929408", "url": "https://cdn.discordapp.com/attachments/1515230295643787377/1556719164180275301/bundle_1.zip?ex=6ac52f33&is=6ac3ddb3&hm=742cc81770b60be7b3cf4ff56eacc9c19ef6cc1f3b47245f83ae161853cd6c74&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-05 18:02:27 UTC", "discovered_at": "2026-10-05T18:02:27.000Z" }, { "id": 151492, "urlhaus_id": "3929407", "url": "https://thisisafalsepositive.st/cdn/v2/9f4e7a2c1b8d.png", "host": "thisisafalsepositive.st", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-05 18:02:25 UTC", "discovered_at": "2026-10-05T18:02:25.000Z" }, { "id": 151493, "urlhaus_id": "3929406", "url": "https://github.com/niehgns/yo1/raw/refs/heads/main/frostclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-05 18:02:24 UTC", "discovered_at": "2026-10-05T18:02:24.000Z" }, { "id": 151494, "urlhaus_id": "3929405", "url": "http://36.70.64.64:42007/Mozi.m", "host": "36.70.64.64", "host_ip": "36.70.64.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 18:02:23 UTC", "discovered_at": "2026-10-05T18:02:23.000Z" }, { "id": 151495, "urlhaus_id": "3929404", "url": "http://180.190.238.89:57500/Mozi.a", "host": "180.190.238.89", "host_ip": "180.190.238.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 18:02:18 UTC", "discovered_at": "2026-10-05T18:02:18.000Z" }, { "id": 151496, "urlhaus_id": "3929403", "url": "https://gitrm.cfd/assets/svchostk.exe", "host": "gitrm.cfd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 18:02:16 UTC", "discovered_at": "2026-10-05T18:02:16.000Z" }, { "id": 151499, "urlhaus_id": "3929402", "url": "https://144.126.148.64/f/b8eac6853dcc452bc021-implant-linux-amd64", "host": "144.126.148.64", "host_ip": "144.126.148.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Go", "last_online": null, "first_seen": "2026-10-05 18:02:15 UTC", "discovered_at": "2026-10-05T18:02:15.000Z" }, { "id": 151498, "urlhaus_id": "3929401", "url": "https://raw.githubusercontent.com/ktn1703/Vanish-Tool-Discord/refs/heads/main/obf-vanish.py", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Phoenix Stealer, python", "last_online": null, "first_seen": "2026-10-05 18:02:15 UTC", "discovered_at": "2026-10-05T18:02:15.000Z" }, { "id": 151497, "urlhaus_id": "3929400", "url": "https://github.com/server123-lab/Analyis-File-Malware-ThreardFox/raw/refs/heads/main/download2.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-05 18:02:15 UTC", "discovered_at": "2026-10-05T18:02:15.000Z" }, { "id": 151507, "urlhaus_id": "3929399", "url": "http://42.237.253.5:45263/i", "host": "42.237.253.5", "host_ip": "42.237.253.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151506, "urlhaus_id": "3929398", "url": "https://white-mode-a35b.modpages.workers.dev/download/corz-client.jar", "host": "white-mode-a35b.modpages.workers.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151505, "urlhaus_id": "3929397", "url": "http://176.65.139.36/eclipse.x86_64", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "automated, cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151504, "urlhaus_id": "3929396", "url": "https://github.com/HunterTeamC2/huynhtoanupload/raw/refs/heads/main/mko1.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151503, "urlhaus_id": "3929395", "url": "http://107.172.132.240/87sbhas6as.sh", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151502, "urlhaus_id": "3929394", "url": "http://176.65.148.144/Hilix.sh", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151501, "urlhaus_id": "3929393", "url": "http://210.208.111.74:53410/bin.sh", "host": "210.208.111.74", "host_ip": "210.208.111.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151500, "urlhaus_id": "3929392", "url": "http://91.92.242.236/files-129312398/files/file_6ca450ddf497eb0f.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-05 18:02:14 UTC", "discovered_at": "2026-10-05T18:02:14.000Z" }, { "id": 151511, "urlhaus_id": "3929391", "url": "http://27.37.103.77:36304/i", "host": "27.37.103.77", "host_ip": "27.37.103.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 18:02:13 UTC", "discovered_at": "2026-10-05T18:02:13.000Z" }, { "id": 151510, "urlhaus_id": "3929390", "url": "http://60.23.237.21:45576/i", "host": "60.23.237.21", "host_ip": "60.23.237.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 18:02:13 UTC", "discovered_at": "2026-10-05T18:02:13.000Z" }, { "id": 151509, "urlhaus_id": "3929389", "url": "http://116.207.221.240:59439/Mozi.m", "host": "116.207.221.240", "host_ip": "116.207.221.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 18:02:13 UTC", "discovered_at": "2026-10-05T18:02:13.000Z" }, { "id": 151508, "urlhaus_id": "3929388", "url": "http://182.113.38.83:38525/i", "host": "182.113.38.83", "host_ip": "182.113.38.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 18:02:13 UTC", "discovered_at": "2026-10-05T18:02:13.000Z" }, { "id": 151513, "urlhaus_id": "3929387", "url": "https://gitrm.cfd/apix.ps1", "host": "gitrm.cfd", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 18:02:08 UTC", "discovered_at": "2026-10-05T18:02:08.000Z" }, { "id": 151512, "urlhaus_id": "3929386", "url": "http://176.65.148.144/bins/Hilix.arm4", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-05 18:02:08 UTC", "discovered_at": "2026-10-05T18:02:08.000Z" }, { "id": 151514, "urlhaus_id": "3929385", "url": "http://176.65.139.36/eclipse.sh", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "automated, cowrie, honeypot", "last_online": null, "first_seen": "2026-10-05 18:02:07 UTC", "discovered_at": "2026-10-05T18:02:07.000Z" }, { "id": 151515, "urlhaus_id": "3929384", "url": "http://111.14.169.186:63698/i", "host": "111.14.169.186", "host_ip": "111.14.169.186", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 18:01:28 UTC", "discovered_at": "2026-10-05T18:01:28.000Z" }, { "id": 151516, "urlhaus_id": "3929383", "url": "http://175.149.67.216:46495/i", "host": "175.149.67.216", "host_ip": "175.149.67.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 17:47:14 UTC", "discovered_at": "2026-10-05T17:47:14.000Z" }, { "id": 151517, "urlhaus_id": "3929382", "url": "http://182.127.161.102:39974/i", "host": "182.127.161.102", "host_ip": "182.127.161.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 17:47:11 UTC", "discovered_at": "2026-10-05T17:47:11.000Z" }, { "id": 151519, "urlhaus_id": "3929381", "url": "http://115.58.129.168:39509/bin.sh", "host": "115.58.129.168", "host_ip": "115.58.129.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 17:47:10 UTC", "discovered_at": "2026-10-05T17:47:10.000Z" }, { "id": 151518, "urlhaus_id": "3929380", "url": "http://60.23.170.10:54006/bin.sh", "host": "60.23.170.10", "host_ip": "60.23.170.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 17:47:10 UTC", "discovered_at": "2026-10-05T17:47:10.000Z" }, { "id": 151520, "urlhaus_id": "3929379", "url": "http://120.84.213.140:41114/i", "host": "120.84.213.140", "host_ip": "120.84.213.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 17:32:19 UTC", "discovered_at": "2026-10-05T17:32:19.000Z" }, { "id": 151521, "urlhaus_id": "3929378", "url": "http://182.113.38.83:38525/bin.sh", "host": "182.113.38.83", "host_ip": "182.113.38.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 17:32:14 UTC", "discovered_at": "2026-10-05T17:32:14.000Z" }, { "id": 151522, "urlhaus_id": "3929377", "url": "http://91.92.34.63:8888/quickb.msi", "host": "91.92.34.63", "host_ip": "91.92.34.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "91-92-34-63-8888, NetSupport, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:24:16 UTC", "discovered_at": "2026-10-05T17:24:16.000Z" }, { "id": 151523, "urlhaus_id": "3929376", "url": "http://96.62.71.22:8888/Newtonsoft.Json.dll", "host": "96.62.71.22", "host_ip": "96.62.71.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": "96-62-71-22-8888, exe, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:19:23 UTC", "discovered_at": "2026-10-05T17:19:23.000Z" }, { "id": 151524, "urlhaus_id": "3929375", "url": "http://111.14.169.186:63698/bin.sh", "host": "111.14.169.186", "host_ip": "111.14.169.186", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 17:17:13 UTC", "discovered_at": "2026-10-05T17:17:13.000Z" }, { "id": 151525, "urlhaus_id": "3929374", "url": "http://182.127.161.102:39974/bin.sh", "host": "182.127.161.102", "host_ip": "182.127.161.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 17:16:28 UTC", "discovered_at": "2026-10-05T17:16:28.000Z" }, { "id": 151526, "urlhaus_id": "3929373", "url": "http://115.51.139.132:50321/i", "host": "115.51.139.132", "host_ip": "115.51.139.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 17:16:17 UTC", "discovered_at": "2026-10-05T17:16:17.000Z" }, { "id": 151527, "urlhaus_id": "3929372", "url": "http://42.228.247.65:33795/i", "host": "42.228.247.65", "host_ip": "42.228.247.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 17:16:16 UTC", "discovered_at": "2026-10-05T17:16:16.000Z" }, { "id": 151528, "urlhaus_id": "3929371", "url": "http://31.56.19.21/mips", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:13:27 UTC", "discovered_at": "2026-10-05T17:13:27.000Z" }, { "id": 151530, "urlhaus_id": "3929370", "url": "http://31.56.19.21/x86_64", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:53 UTC", "discovered_at": "2026-10-05T17:12:53.000Z" }, { "id": 151529, "urlhaus_id": "3929369", "url": "http://31.56.19.21/mipsel", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:53 UTC", "discovered_at": "2026-10-05T17:12:53.000Z" }, { "id": 151531, "urlhaus_id": "3929368", "url": "http://31.56.19.21/i686", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:51 UTC", "discovered_at": "2026-10-05T17:12:51.000Z" }, { "id": 151532, "urlhaus_id": "3929367", "url": "http://31.56.19.21/armv6l", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:29 UTC", "discovered_at": "2026-10-05T17:12:29.000Z" }, { "id": 151536, "urlhaus_id": "3929366", "url": "http://31.56.19.21/x86", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:23 UTC", "discovered_at": "2026-10-05T17:12:23.000Z" }, { "id": 151535, "urlhaus_id": "3929365", "url": "http://31.56.19.21/armv5l", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:23 UTC", "discovered_at": "2026-10-05T17:12:23.000Z" }, { "id": 151534, "urlhaus_id": "3929364", "url": "http://31.56.19.21/ppc64", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:23 UTC", "discovered_at": "2026-10-05T17:12:23.000Z" }, { "id": 151533, "urlhaus_id": "3929363", "url": "http://31.56.19.21/armv7l", "host": "31.56.19.21", "host_ip": "31.56.19.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "31-56-19-21, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 17:12:23 UTC", "discovered_at": "2026-10-05T17:12:23.000Z" }, { "id": 151537, "urlhaus_id": "3929362", "url": "http://193.148.56.155/111.exe", "host": "193.148.56.155", "host_ip": "193.148.56.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "193-148-56-155, exe, ua-wget, VorishkaStealer", "last_online": null, "first_seen": "2026-10-05 17:07:13 UTC", "discovered_at": "2026-10-05T17:07:13.000Z" }, { "id": 151538, "urlhaus_id": "3929361", "url": "http://121.238.240.68:3588/i", "host": "121.238.240.68", "host_ip": "121.238.240.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 17:02:20 UTC", "discovered_at": "2026-10-05T17:02:20.000Z" }, { "id": 151539, "urlhaus_id": "3929360", "url": "http://64.89.161.65/proceso.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs", "last_online": null, "first_seen": "2026-10-05 17:01:28 UTC", "discovered_at": "2026-10-05T17:01:28.000Z" }, { "id": 151543, "urlhaus_id": "3929359", "url": "https://64.89.161.65/sostener.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs, xworm", "last_online": null, "first_seen": "2026-10-05 17:00:31 UTC", "discovered_at": "2026-10-05T17:00:31.000Z" }, { "id": 151542, "urlhaus_id": "3929358", "url": "https://64.89.161.65/sostener1.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs", "last_online": null, "first_seen": "2026-10-05 17:00:31 UTC", "discovered_at": "2026-10-05T17:00:31.000Z" }, { "id": 151541, "urlhaus_id": "3929357", "url": "https://64.89.161.65/proceso.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs", "last_online": null, "first_seen": "2026-10-05 17:00:31 UTC", "discovered_at": "2026-10-05T17:00:31.000Z" }, { "id": 151540, "urlhaus_id": "3929356", "url": "http://64.89.161.65/sostener.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs", "last_online": null, "first_seen": "2026-10-05 17:00:31 UTC", "discovered_at": "2026-10-05T17:00:31.000Z" }, { "id": 151546, "urlhaus_id": "3929355", "url": "https://64.89.161.65/svchost.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs, xworm", "last_online": null, "first_seen": "2026-10-05 17:00:19 UTC", "discovered_at": "2026-10-05T17:00:19.000Z" }, { "id": 151545, "urlhaus_id": "3929354", "url": "http://64.89.161.65/sostener1.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs, xworm", "last_online": null, "first_seen": "2026-10-05 17:00:19 UTC", "discovered_at": "2026-10-05T17:00:19.000Z" }, { "id": 151544, "urlhaus_id": "3929353", "url": "http://64.89.161.65/svchost.vbs", "host": "64.89.161.65", "host_ip": "64.89.161.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": "64-89-161-65, ua-wget, vbs, xworm", "last_online": null, "first_seen": "2026-10-05 17:00:19 UTC", "discovered_at": "2026-10-05T17:00:19.000Z" }, { "id": 151548, "urlhaus_id": "3929352", "url": "http://176.65.139.201/nyx_bot_linux_amd64_packed", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:52:22 UTC", "discovered_at": "2026-10-05T16:52:22.000Z" }, { "id": 151547, "urlhaus_id": "3929351", "url": "http://176.65.139.201/nyx_bot_linux_mipsle_packed", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:52:22 UTC", "discovered_at": "2026-10-05T16:52:22.000Z" }, { "id": 151549, "urlhaus_id": "3929350", "url": "http://176.65.139.201/bot.exe", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-201, exe, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:52:15 UTC", "discovered_at": "2026-10-05T16:52:15.000Z" }, { "id": 151550, "urlhaus_id": "3929349", "url": "http://176.65.139.159/hiddenbin/i686", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:50:19 UTC", "discovered_at": "2026-10-05T16:50:19.000Z" }, { "id": 151563, "urlhaus_id": "3929348", "url": "http://176.65.139.159/hiddenbin/arm", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151562, "urlhaus_id": "3929347", "url": "http://176.65.139.159/hiddenbin/android-arm", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151561, "urlhaus_id": "3929346", "url": "http://176.65.139.159/hiddenbin/mips", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151560, "urlhaus_id": "3929345", "url": "http://176.65.139.159/hiddenbin/m68k", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151559, "urlhaus_id": "3929344", "url": "http://176.65.139.159/hiddenbin/mipsel", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151558, "urlhaus_id": "3929343", "url": "http://176.65.139.159/hiddenbin/x86_64", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151557, "urlhaus_id": "3929342", "url": "http://176.65.139.159/hiddenbin/android-arm64", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-159, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151556, "urlhaus_id": "3929341", "url": "http://176.65.139.159/hiddenbin/arm7", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151555, "urlhaus_id": "3929340", "url": "http://176.65.139.159/hiddenbin/x86", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151554, "urlhaus_id": "3929339", "url": "http://176.65.139.159/hiddenbin/sh4", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151553, "urlhaus_id": "3929338", "url": "http://176.65.139.159/hiddenbin/ppc", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151552, "urlhaus_id": "3929337", "url": "http://176.65.139.159/hiddenbin/arm6", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151551, "urlhaus_id": "3929336", "url": "http://176.65.139.159/hiddenbin/arm5", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:49:26 UTC", "discovered_at": "2026-10-05T16:49:26.000Z" }, { "id": 151564, "urlhaus_id": "3929335", "url": "http://176.65.139.159/hiddenbin/arc", "host": "176.65.139.159", "host_ip": "176.65.139.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-159, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:48:28 UTC", "discovered_at": "2026-10-05T16:48:28.000Z" }, { "id": 151567, "urlhaus_id": "3929334", "url": "http://176.65.139.36/eclipse.sh4", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:47:24 UTC", "discovered_at": "2026-10-05T16:47:24.000Z" }, { "id": 151566, "urlhaus_id": "3929333", "url": "http://176.65.139.36/eclipse.armv6l", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:47:24 UTC", "discovered_at": "2026-10-05T16:47:24.000Z" }, { "id": 151565, "urlhaus_id": "3929332", "url": "http://176.65.139.36/eclipse.i686", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:47:24 UTC", "discovered_at": "2026-10-05T16:47:24.000Z" }, { "id": 151568, "urlhaus_id": "3929331", "url": "http://42.228.247.65:33795/bin.sh", "host": "42.228.247.65", "host_ip": "42.228.247.65", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 16:47:15 UTC", "discovered_at": "2026-10-05T16:47:15.000Z" }, { "id": 151570, "urlhaus_id": "3929330", "url": "http://59.97.251.2:41526/i", "host": "59.97.251.2", "host_ip": "59.97.251.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 16:47:14 UTC", "discovered_at": "2026-10-05T16:47:14.000Z" }, { "id": 151569, "urlhaus_id": "3929329", "url": "http://218.16.164.142:36531/i", "host": "218.16.164.142", "host_ip": "218.16.164.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 16:47:14 UTC", "discovered_at": "2026-10-05T16:47:14.000Z" }, { "id": 151572, "urlhaus_id": "3929328", "url": "http://27.37.228.57:57621/i", "host": "27.37.228.57", "host_ip": "27.37.228.57", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 16:47:13 UTC", "discovered_at": "2026-10-05T16:47:13.000Z" }, { "id": 151571, "urlhaus_id": "3929327", "url": "http://120.43.45.73:46074/bin.sh", "host": "120.43.45.73", "host_ip": "120.43.45.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 16:47:13 UTC", "discovered_at": "2026-10-05T16:47:13.000Z" }, { "id": 151577, "urlhaus_id": "3929326", "url": "http://176.65.139.36/eclipse.armv4l", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:46:24 UTC", "discovered_at": "2026-10-05T16:46:24.000Z" }, { "id": 151576, "urlhaus_id": "3929325", "url": "http://176.65.139.36/eclipse.mipsel", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:46:24 UTC", "discovered_at": "2026-10-05T16:46:24.000Z" }, { "id": 151575, "urlhaus_id": "3929324", "url": "http://176.65.139.36/eclipse.i586", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:46:24 UTC", "discovered_at": "2026-10-05T16:46:24.000Z" }, { "id": 151574, "urlhaus_id": "3929323", "url": "http://176.65.139.36/eclipse.powerpc", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:46:24 UTC", "discovered_at": "2026-10-05T16:46:24.000Z" }, { "id": 151573, "urlhaus_id": "3929322", "url": "http://176.65.139.36/eclipse.mips", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:46:24 UTC", "discovered_at": "2026-10-05T16:46:24.000Z" }, { "id": 151579, "urlhaus_id": "3929321", "url": "http://176.65.139.36/eclipse.armv5l", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:46:22 UTC", "discovered_at": "2026-10-05T16:46:22.000Z" }, { "id": 151578, "urlhaus_id": "3929320", "url": "http://176.65.139.36/eclipse.m68k", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-36, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:46:22 UTC", "discovered_at": "2026-10-05T16:46:22.000Z" }, { "id": 151581, "urlhaus_id": "3929319", "url": "http://176.65.139.135/bins/Space.x86", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:27 UTC", "discovered_at": "2026-10-05T16:44:27.000Z" }, { "id": 151580, "urlhaus_id": "3929318", "url": "http://176.65.139.135/bins/Space.arc", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:27 UTC", "discovered_at": "2026-10-05T16:44:27.000Z" }, { "id": 151587, "urlhaus_id": "3929317", "url": "http://176.65.139.135/bins/Space.spc", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:26 UTC", "discovered_at": "2026-10-05T16:44:26.000Z" }, { "id": 151586, "urlhaus_id": "3929316", "url": "http://176.65.139.135/bins/Space.mips", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:26 UTC", "discovered_at": "2026-10-05T16:44:26.000Z" }, { "id": 151585, "urlhaus_id": "3929315", "url": "http://176.65.139.135/bins/Space.mpsl", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:26 UTC", "discovered_at": "2026-10-05T16:44:26.000Z" }, { "id": 151584, "urlhaus_id": "3929314", "url": "http://176.65.139.135/bins/Space.arm", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:26 UTC", "discovered_at": "2026-10-05T16:44:26.000Z" }, { "id": 151583, "urlhaus_id": "3929313", "url": "http://176.65.139.135/bins/Space.sh4", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:26 UTC", "discovered_at": "2026-10-05T16:44:26.000Z" }, { "id": 151582, "urlhaus_id": "3929312", "url": "http://176.65.139.135/bins/Space.arm6", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:26 UTC", "discovered_at": "2026-10-05T16:44:26.000Z" }, { "id": 151590, "urlhaus_id": "3929311", "url": "http://176.65.139.135/bins/Space.arm7", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:25 UTC", "discovered_at": "2026-10-05T16:44:25.000Z" }, { "id": 151589, "urlhaus_id": "3929310", "url": "http://176.65.139.135/bins/Space.x86_64", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:25 UTC", "discovered_at": "2026-10-05T16:44:25.000Z" }, { "id": 151588, "urlhaus_id": "3929309", "url": "http://176.65.139.135/bins/Space.m68k", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:44:25 UTC", "discovered_at": "2026-10-05T16:44:25.000Z" }, { "id": 151593, "urlhaus_id": "3929308", "url": "http://176.65.139.135/bins/Space.ppc", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:43:25 UTC", "discovered_at": "2026-10-05T16:43:25.000Z" }, { "id": 151592, "urlhaus_id": "3929307", "url": "http://176.65.139.135/bins/Space.arm5", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:43:25 UTC", "discovered_at": "2026-10-05T16:43:25.000Z" }, { "id": 151591, "urlhaus_id": "3929306", "url": "http://176.65.139.135/bins/Space.i686", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:43:25 UTC", "discovered_at": "2026-10-05T16:43:25.000Z" }, { "id": 151594, "urlhaus_id": "3929305", "url": "http://176.65.139.135/ipc.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, sh, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:42:19 UTC", "discovered_at": "2026-10-05T16:42:19.000Z" }, { "id": 151595, "urlhaus_id": "3929304", "url": "http://176.65.139.168/mips", "host": "176.65.139.168", "host_ip": "176.65.139.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-168, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:39:17 UTC", "discovered_at": "2026-10-05T16:39:17.000Z" }, { "id": 151596, "urlhaus_id": "3929303", "url": "http://176.65.139.168/mpsl", "host": "176.65.139.168", "host_ip": "176.65.139.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-168, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:38:26 UTC", "discovered_at": "2026-10-05T16:38:26.000Z" }, { "id": 151597, "urlhaus_id": "3929302", "url": "http://176.65.139.139/run.sh", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-139, sh, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:37:19 UTC", "discovered_at": "2026-10-05T16:37:19.000Z" }, { "id": 151598, "urlhaus_id": "3929301", "url": "http://94.154.43.39/mips64", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-154-43-39, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:36:38 UTC", "discovered_at": "2026-10-05T16:36:38.000Z" }, { "id": 151599, "urlhaus_id": "3929300", "url": "http://94.154.43.39/mipsel", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:39 UTC", "discovered_at": "2026-10-05T16:35:39.000Z" }, { "id": 151606, "urlhaus_id": "3929299", "url": "http://94.154.43.39/i686", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:33 UTC", "discovered_at": "2026-10-05T16:35:33.000Z" }, { "id": 151605, "urlhaus_id": "3929298", "url": "http://94.154.43.39/ppc64", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:33 UTC", "discovered_at": "2026-10-05T16:35:33.000Z" }, { "id": 151604, "urlhaus_id": "3929297", "url": "http://94.154.43.39/armv6l", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:33 UTC", "discovered_at": "2026-10-05T16:35:33.000Z" }, { "id": 151603, "urlhaus_id": "3929296", "url": "http://94.154.43.39/arm64", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:33 UTC", "discovered_at": "2026-10-05T16:35:33.000Z" }, { "id": 151602, "urlhaus_id": "3929295", "url": "http://94.154.43.39/armv5l", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:33 UTC", "discovered_at": "2026-10-05T16:35:33.000Z" }, { "id": 151601, "urlhaus_id": "3929294", "url": "http://94.154.43.39/amd64", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:33 UTC", "discovered_at": "2026-10-05T16:35:33.000Z" }, { "id": 151600, "urlhaus_id": "3929293", "url": "http://94.154.43.39/mips64le", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:33 UTC", "discovered_at": "2026-10-05T16:35:33.000Z" }, { "id": 151607, "urlhaus_id": "3929292", "url": "http://94.154.43.39/ppc64le", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:32 UTC", "discovered_at": "2026-10-05T16:35:32.000Z" }, { "id": 151610, "urlhaus_id": "3929291", "url": "http://94.154.43.39/run.sh", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, sh, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:27 UTC", "discovered_at": "2026-10-05T16:35:27.000Z" }, { "id": 151609, "urlhaus_id": "3929290", "url": "http://94.154.43.39/mips", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:27 UTC", "discovered_at": "2026-10-05T16:35:27.000Z" }, { "id": 151608, "urlhaus_id": "3929289", "url": "http://94.154.43.39/armv7l", "host": "94.154.43.39", "host_ip": "94.154.43.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-39, elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:35:27 UTC", "discovered_at": "2026-10-05T16:35:27.000Z" }, { "id": 151611, "urlhaus_id": "3929288", "url": "http://219.155.201.253:49340/i", "host": "219.155.201.253", "host_ip": "219.155.201.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 16:31:28 UTC", "discovered_at": "2026-10-05T16:31:28.000Z" }, { "id": 151612, "urlhaus_id": "3929287", "url": "http://59.96.142.66:50333/i", "host": "59.96.142.66", "host_ip": "59.96.142.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 16:31:18 UTC", "discovered_at": "2026-10-05T16:31:18.000Z" }, { "id": 151613, "urlhaus_id": "3929286", "url": "https://104.194.155.191/Bin/ScreenConnect.ClientSetup.exe", "host": "104.194.155.191", "host_ip": "104.194.155.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": "104-194-155-191, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:30:20 UTC", "discovered_at": "2026-10-05T16:30:20.000Z" }, { "id": 151614, "urlhaus_id": "3929285", "url": "https://104.194.155.191/bin/support.client.exe", "host": "104.194.155.191", "host_ip": "104.194.155.191", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "104-194-155-191, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-05 16:30:18 UTC", "discovered_at": "2026-10-05T16:30:18.000Z" }, { "id": 151615, "urlhaus_id": "3929284", "url": "http://182.240.202.183:56323/bin.sh", "host": "182.240.202.183", "host_ip": "182.240.202.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 16:24:28 UTC", "discovered_at": "2026-10-05T16:24:28.000Z" }, { "id": 151616, "urlhaus_id": "3929283", "url": "http://59.103.116.83:49847/bin.sh", "host": "59.103.116.83", "host_ip": "59.103.116.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 16:18:23 UTC", "discovered_at": "2026-10-05T16:18:23.000Z" }, { "id": 151618, "urlhaus_id": "3929282", "url": "http://59.97.251.2:41526/bin.sh", "host": "59.97.251.2", "host_ip": "59.97.251.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 16:17:13 UTC", "discovered_at": "2026-10-05T16:17:13.000Z" }, { "id": 151617, "urlhaus_id": "3929281", "url": "http://105.184.158.253:37135/i", "host": "105.184.158.253", "host_ip": "105.184.158.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 16:17:13 UTC", "discovered_at": "2026-10-05T16:17:13.000Z" }, { "id": 151621, "urlhaus_id": "3929280", "url": "http://171.81.96.177:46578/i", "host": "171.81.96.177", "host_ip": "171.81.96.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 16:17:12 UTC", "discovered_at": "2026-10-05T16:17:12.000Z" }, { "id": 151620, "urlhaus_id": "3929279", "url": "http://218.16.164.142:36531/bin.sh", "host": "218.16.164.142", "host_ip": "218.16.164.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 16:17:12 UTC", "discovered_at": "2026-10-05T16:17:12.000Z" }, { "id": 151619, "urlhaus_id": "3929278", "url": "http://115.57.215.75:48432/bin.sh", "host": "115.57.215.75", "host_ip": "115.57.215.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 16:17:12 UTC", "discovered_at": "2026-10-05T16:17:12.000Z" }, { "id": 151622, "urlhaus_id": "3929277", "url": "http://182.127.111.168:48486/bin.sh", "host": "182.127.111.168", "host_ip": "182.127.111.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 16:06:28 UTC", "discovered_at": "2026-10-05T16:06:28.000Z" }, { "id": 151624, "urlhaus_id": "3929276", "url": "http://42.180.59.73:50911/i", "host": "42.180.59.73", "host_ip": "42.180.59.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 16:02:14 UTC", "discovered_at": "2026-10-05T16:02:14.000Z" }, { "id": 151623, "urlhaus_id": "3929275", "url": "http://27.204.198.22:36088/bin.sh", "host": "27.204.198.22", "host_ip": "27.204.198.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 16:02:14 UTC", "discovered_at": "2026-10-05T16:02:14.000Z" }, { "id": 151625, "urlhaus_id": "3929274", "url": "http://144.48.121.51:35045/bin.sh", "host": "144.48.121.51", "host_ip": "144.48.121.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 15:54:29 UTC", "discovered_at": "2026-10-05T15:54:29.000Z" }, { "id": 151627, "urlhaus_id": "3929273", "url": "http://59.96.142.66:50333/bin.sh", "host": "59.96.142.66", "host_ip": "59.96.142.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 15:47:14 UTC", "discovered_at": "2026-10-05T15:47:14.000Z" }, { "id": 151626, "urlhaus_id": "3929272", "url": "http://171.81.96.177:46578/bin.sh", "host": "171.81.96.177", "host_ip": "171.81.96.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 15:47:14 UTC", "discovered_at": "2026-10-05T15:47:14.000Z" }, { "id": 151629, "urlhaus_id": "3929271", "url": "http://222.127.71.141:52448/i", "host": "222.127.71.141", "host_ip": "222.127.71.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 15:47:13 UTC", "discovered_at": "2026-10-05T15:47:13.000Z" }, { "id": 151628, "urlhaus_id": "3929270", "url": "http://183.214.149.164:34937/i", "host": "183.214.149.164", "host_ip": "183.214.149.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 15:47:13 UTC", "discovered_at": "2026-10-05T15:47:13.000Z" }, { "id": 151631, "urlhaus_id": "3929269", "url": "http://42.59.237.14:57635/bin.sh", "host": "42.59.237.14", "host_ip": "42.59.237.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 15:47:12 UTC", "discovered_at": "2026-10-05T15:47:12.000Z" }, { "id": 151630, "urlhaus_id": "3929268", "url": "http://60.23.239.109:57812/i", "host": "60.23.239.109", "host_ip": "60.23.239.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 15:47:12 UTC", "discovered_at": "2026-10-05T15:47:12.000Z" }, { "id": 151632, "urlhaus_id": "3929267", "url": "http://222.127.251.23:56920/i", "host": "222.127.251.23", "host_ip": "222.127.251.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 15:40:24 UTC", "discovered_at": "2026-10-05T15:40:24.000Z" }, { "id": 151633, "urlhaus_id": "3929266", "url": "http://94.137.54.143:3344/i", "host": "94.137.54.143", "host_ip": "94.137.54.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 15:32:13 UTC", "discovered_at": "2026-10-05T15:32:13.000Z" }, { "id": 151634, "urlhaus_id": "3929265", "url": "http://123.5.184.172:52165/bin.sh", "host": "123.5.184.172", "host_ip": "123.5.184.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 15:19:22 UTC", "discovered_at": "2026-10-05T15:19:22.000Z" }, { "id": 151635, "urlhaus_id": "3929264", "url": "http://105.225.184.216:42359/i", "host": "105.225.184.216", "host_ip": "105.225.184.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 15:17:15 UTC", "discovered_at": "2026-10-05T15:17:15.000Z" }, { "id": 151637, "urlhaus_id": "3929263", "url": "http://222.127.251.23:56920/bin.sh", "host": "222.127.251.23", "host_ip": "222.127.251.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 15:17:14 UTC", "discovered_at": "2026-10-05T15:17:14.000Z" }, { "id": 151636, "urlhaus_id": "3929262", "url": "http://196.189.130.28:59977/i", "host": "196.189.130.28", "host_ip": "196.189.130.28", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 15:17:14 UTC", "discovered_at": "2026-10-05T15:17:14.000Z" }, { "id": 151639, "urlhaus_id": "3929261", "url": "http://123.12.241.56:49065/bin.sh", "host": "123.12.241.56", "host_ip": "123.12.241.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 15:02:11 UTC", "discovered_at": "2026-10-05T15:02:11.000Z" }, { "id": 151638, "urlhaus_id": "3929260", "url": "http://60.23.233.135:57235/i", "host": "60.23.233.135", "host_ip": "60.23.233.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 15:02:11 UTC", "discovered_at": "2026-10-05T15:02:11.000Z" }, { "id": 151640, "urlhaus_id": "3929259", "url": "http://27.37.228.163:48371/i", "host": "27.37.228.163", "host_ip": "27.37.228.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 14:59:30 UTC", "discovered_at": "2026-10-05T14:59:30.000Z" }, { "id": 151641, "urlhaus_id": "3929258", "url": "https://aqclqkcfjwbgknkwnvmm.supabase.co/storage/v1/object/public/client-files/uploads/1791124176602-3baa8b5c-420e-4720-b7e2-a493fa7f8963.jar", "host": "aqclqkcfjwbgknkwnvmm.supabase.co", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-05 14:39:29 UTC", "discovered_at": "2026-10-05T14:39:29.000Z" }, { "id": 151642, "urlhaus_id": "3929257", "url": "https://aqclqkcfjwbgknkwnvmm.supabase.co/storage/v1/object/public/client-files/uploads/1791124818494-be5073d9-a31c-4676-8d64-c62002c6aa6d.jar", "host": "aqclqkcfjwbgknkwnvmm.supabase.co", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-05 14:39:22 UTC", "discovered_at": "2026-10-05T14:39:22.000Z" }, { "id": 151643, "urlhaus_id": "3929256", "url": "https://aqclqkcfjwbgknkwnvmm.supabase.co/storage/v1/object/public/client-files/uploads/1791124268555-4907942c-6c0d-4a06-8fdf-8f7bcb0a8e6a.jar", "host": "aqclqkcfjwbgknkwnvmm.supabase.co", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-05 14:39:19 UTC", "discovered_at": "2026-10-05T14:39:19.000Z" }, { "id": 151644, "urlhaus_id": "3929255", "url": "https://www.dosyaupload.com/d8Wx/Cyberdupe-1.0.0-1.21.11.jar", "host": "www.dosyaupload.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 14:39:16 UTC", "discovered_at": "2026-10-05T14:39:16.000Z" }, { "id": 151645, "urlhaus_id": "3929254", "url": "http://36.64.184.26:53519/bin.sh", "host": "36.64.184.26", "host_ip": "36.64.184.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 14:33:28 UTC", "discovered_at": "2026-10-05T14:33:28.000Z" }, { "id": 151646, "urlhaus_id": "3929253", "url": "http://60.23.233.135:57235/bin.sh", "host": "60.23.233.135", "host_ip": "60.23.233.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 14:32:21 UTC", "discovered_at": "2026-10-05T14:32:21.000Z" }, { "id": 151647, "urlhaus_id": "3929252", "url": "http://223.10.2.193:34533/i", "host": "223.10.2.193", "host_ip": "223.10.2.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 14:20:19 UTC", "discovered_at": "2026-10-05T14:20:19.000Z" }, { "id": 151648, "urlhaus_id": "3929251", "url": "http://223.10.2.193:34533/bin.sh", "host": "223.10.2.193", "host_ip": "223.10.2.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 14:19:25 UTC", "discovered_at": "2026-10-05T14:19:25.000Z" }, { "id": 151649, "urlhaus_id": "3929250", "url": "http://222.127.54.84:39535/i", "host": "222.127.54.84", "host_ip": "222.127.54.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 14:16:18 UTC", "discovered_at": "2026-10-05T14:16:18.000Z" }, { "id": 151650, "urlhaus_id": "3929249", "url": "http://119.184.181.83:36383/bin.sh", "host": "119.184.181.83", "host_ip": "119.184.181.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 14:16:16 UTC", "discovered_at": "2026-10-05T14:16:16.000Z" }, { "id": 151651, "urlhaus_id": "3929248", "url": "http://119.184.181.83:36383/i", "host": "119.184.181.83", "host_ip": "119.184.181.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 14:16:15 UTC", "discovered_at": "2026-10-05T14:16:15.000Z" }, { "id": 151653, "urlhaus_id": "3929247", "url": "http://123.8.26.165:34881/i", "host": "123.8.26.165", "host_ip": "123.8.26.165", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 14:16:14 UTC", "discovered_at": "2026-10-05T14:16:14.000Z" }, { "id": 151652, "urlhaus_id": "3929246", "url": "http://182.113.212.178:39726/bin.sh", "host": "182.113.212.178", "host_ip": "182.113.212.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 14:16:14 UTC", "discovered_at": "2026-10-05T14:16:14.000Z" }, { "id": 151654, "urlhaus_id": "3929245", "url": "http://221.1.147.102:37178/bin.sh", "host": "221.1.147.102", "host_ip": "221.1.147.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 14:06:24 UTC", "discovered_at": "2026-10-05T14:06:24.000Z" }, { "id": 151655, "urlhaus_id": "3929244", "url": "http://117.63.241.133:54628/bin.sh", "host": "117.63.241.133", "host_ip": "117.63.241.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 14:03:16 UTC", "discovered_at": "2026-10-05T14:03:16.000Z" }, { "id": 151657, "urlhaus_id": "3929243", "url": "http://60.23.237.21:45576/bin.sh", "host": "60.23.237.21", "host_ip": "60.23.237.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 14:01:17 UTC", "discovered_at": "2026-10-05T14:01:17.000Z" }, { "id": 151656, "urlhaus_id": "3929242", "url": "http://105.184.168.17:43219/i", "host": "105.184.168.17", "host_ip": "105.184.168.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 14:01:17 UTC", "discovered_at": "2026-10-05T14:01:17.000Z" }, { "id": 151663, "urlhaus_id": "3929241", "url": "http://61.52.78.135:57433/i", "host": "61.52.78.135", "host_ip": "61.52.78.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 14:01:16 UTC", "discovered_at": "2026-10-05T14:01:16.000Z" }, { "id": 151662, "urlhaus_id": "3929240", "url": "http://103.172.186.170:38524/i", "host": "103.172.186.170", "host_ip": "103.172.186.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 14:01:16 UTC", "discovered_at": "2026-10-05T14:01:16.000Z" }, { "id": 151661, "urlhaus_id": "3929239", "url": "http://182.126.85.205:38625/i", "host": "182.126.85.205", "host_ip": "182.126.85.205", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 14:01:16 UTC", "discovered_at": "2026-10-05T14:01:16.000Z" }, { "id": 151660, "urlhaus_id": "3929238", "url": "http://103.209.65.74:46453/bin.sh", "host": "103.209.65.74", "host_ip": "103.209.65.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 14:01:16 UTC", "discovered_at": "2026-10-05T14:01:16.000Z" }, { "id": 151659, "urlhaus_id": "3929237", "url": "http://182.126.85.205:38625/bin.sh", "host": "182.126.85.205", "host_ip": "182.126.85.205", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 14:01:16 UTC", "discovered_at": "2026-10-05T14:01:16.000Z" }, { "id": 151658, "urlhaus_id": "3929236", "url": "http://182.117.50.118:33921/bin.sh", "host": "182.117.50.118", "host_ip": "182.117.50.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 14:01:16 UTC", "discovered_at": "2026-10-05T14:01:16.000Z" }, { "id": 151664, "urlhaus_id": "3929235", "url": "http://222.127.54.84:39535/bin.sh", "host": "222.127.54.84", "host_ip": "222.127.54.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 13:49:24 UTC", "discovered_at": "2026-10-05T13:49:24.000Z" }, { "id": 151666, "urlhaus_id": "3929234", "url": "http://182.121.16.108:56520/i", "host": "182.121.16.108", "host_ip": "182.121.16.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 13:47:13 UTC", "discovered_at": "2026-10-05T13:47:13.000Z" }, { "id": 151665, "urlhaus_id": "3929233", "url": "http://45.177.32.104:49383/i", "host": "45.177.32.104", "host_ip": "45.177.32.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 13:47:13 UTC", "discovered_at": "2026-10-05T13:47:13.000Z" }, { "id": 151667, "urlhaus_id": "3929232", "url": "http://180.190.202.146:57951/i", "host": "180.190.202.146", "host_ip": "180.190.202.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 13:47:12 UTC", "discovered_at": "2026-10-05T13:47:12.000Z" }, { "id": 151668, "urlhaus_id": "3929231", "url": "http://46.10.44.157:43860/i", "host": "46.10.44.157", "host_ip": "46.10.44.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 13:47:11 UTC", "discovered_at": "2026-10-05T13:47:11.000Z" }, { "id": 151669, "urlhaus_id": "3929230", "url": "http://46.10.44.157:43860/bin.sh", "host": "46.10.44.157", "host_ip": "46.10.44.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 13:46:31 UTC", "discovered_at": "2026-10-05T13:46:31.000Z" }, { "id": 151670, "urlhaus_id": "3929229", "url": "http://41.216.227.27:51974/i", "host": "41.216.227.27", "host_ip": "41.216.227.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 13:32:16 UTC", "discovered_at": "2026-10-05T13:32:16.000Z" }, { "id": 151673, "urlhaus_id": "3929228", "url": "http://42.7.220.160:54093/i", "host": "42.7.220.160", "host_ip": "42.7.220.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 13:32:15 UTC", "discovered_at": "2026-10-05T13:32:15.000Z" }, { "id": 151672, "urlhaus_id": "3929227", "url": "http://42.55.5.203:55832/bin.sh", "host": "42.55.5.203", "host_ip": "42.55.5.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 13:32:15 UTC", "discovered_at": "2026-10-05T13:32:15.000Z" }, { "id": 151671, "urlhaus_id": "3929226", "url": "http://103.172.186.170:38524/bin.sh", "host": "103.172.186.170", "host_ip": "103.172.186.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 13:32:15 UTC", "discovered_at": "2026-10-05T13:32:15.000Z" }, { "id": 151674, "urlhaus_id": "3929225", "url": "http://175.31.228.93:38011/bin.sh", "host": "175.31.228.93", "host_ip": "175.31.228.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 13:17:28 UTC", "discovered_at": "2026-10-05T13:17:28.000Z" }, { "id": 151676, "urlhaus_id": "3929224", "url": "http://115.58.181.63:40854/i", "host": "115.58.181.63", "host_ip": "115.58.181.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 13:16:18 UTC", "discovered_at": "2026-10-05T13:16:18.000Z" }, { "id": 151675, "urlhaus_id": "3929223", "url": "http://115.58.181.63:40854/bin.sh", "host": "115.58.181.63", "host_ip": "115.58.181.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 13:16:18 UTC", "discovered_at": "2026-10-05T13:16:18.000Z" }, { "id": 151678, "urlhaus_id": "3929222", "url": "http://175.151.104.143:37585/bin.sh", "host": "175.151.104.143", "host_ip": "175.151.104.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 13:16:17 UTC", "discovered_at": "2026-10-05T13:16:17.000Z" }, { "id": 151677, "urlhaus_id": "3929221", "url": "http://105.186.85.167:56299/i", "host": "105.186.85.167", "host_ip": "105.186.85.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 13:16:17 UTC", "discovered_at": "2026-10-05T13:16:17.000Z" }, { "id": 151679, "urlhaus_id": "3929220", "url": "http://104.168.4.206/adb.arm7", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 13:04:17 UTC", "discovered_at": "2026-10-05T13:04:17.000Z" }, { "id": 151680, "urlhaus_id": "3929219", "url": "http://120.82.203.7:48991/i", "host": "120.82.203.7", "host_ip": "120.82.203.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 13:01:31 UTC", "discovered_at": "2026-10-05T13:01:31.000Z" }, { "id": 151683, "urlhaus_id": "3929218", "url": "http://105.186.85.167:56299/bin.sh", "host": "105.186.85.167", "host_ip": "105.186.85.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 13:01:19 UTC", "discovered_at": "2026-10-05T13:01:19.000Z" }, { "id": 151682, "urlhaus_id": "3929217", "url": "http://42.232.228.135:34522/i", "host": "42.232.228.135", "host_ip": "42.232.228.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 13:01:19 UTC", "discovered_at": "2026-10-05T13:01:19.000Z" }, { "id": 151681, "urlhaus_id": "3929216", "url": "http://42.232.228.135:34522/bin.sh", "host": "42.232.228.135", "host_ip": "42.232.228.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 13:01:19 UTC", "discovered_at": "2026-10-05T13:01:19.000Z" }, { "id": 151684, "urlhaus_id": "3929215", "url": "http://61.53.205.39:35047/bin.sh", "host": "61.53.205.39", "host_ip": "61.53.205.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 12:58:17 UTC", "discovered_at": "2026-10-05T12:58:17.000Z" }, { "id": 151685, "urlhaus_id": "3929214", "url": "http://120.28.215.116:57223/Mozi.m", "host": "120.28.215.116", "host_ip": "120.28.215.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 12:55:19 UTC", "discovered_at": "2026-10-05T12:55:19.000Z" }, { "id": 151686, "urlhaus_id": "3929213", "url": "http://113.94.58.233:7431/Mozi.m", "host": "113.94.58.233", "host_ip": "113.94.58.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 12:55:15 UTC", "discovered_at": "2026-10-05T12:55:15.000Z" }, { "id": 151687, "urlhaus_id": "3929212", "url": "http://115.53.209.94:38348/i", "host": "115.53.209.94", "host_ip": "115.53.209.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 12:47:14 UTC", "discovered_at": "2026-10-05T12:47:14.000Z" }, { "id": 151689, "urlhaus_id": "3929211", "url": "http://123.5.187.230:50775/i", "host": "123.5.187.230", "host_ip": "123.5.187.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 12:47:13 UTC", "discovered_at": "2026-10-05T12:47:13.000Z" }, { "id": 151688, "urlhaus_id": "3929210", "url": "http://27.152.11.202:45011/i", "host": "27.152.11.202", "host_ip": "27.152.11.202", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 12:47:13 UTC", "discovered_at": "2026-10-05T12:47:13.000Z" }, { "id": 151690, "urlhaus_id": "3929209", "url": "http://163.142.95.86:40964/i", "host": "163.142.95.86", "host_ip": "163.142.95.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 12:47:11 UTC", "discovered_at": "2026-10-05T12:47:11.000Z" }, { "id": 151691, "urlhaus_id": "3929208", "url": "http://176.65.139.140/bins/spc", "host": "176.65.139.140", "host_ip": "176.65.139.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 12:42:29 UTC", "discovered_at": "2026-10-05T12:42:29.000Z" }, { "id": 151692, "urlhaus_id": "3929207", "url": "http://210.208.110.172:43757/i", "host": "210.208.110.172", "host_ip": "210.208.110.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 12:32:18 UTC", "discovered_at": "2026-10-05T12:32:18.000Z" }, { "id": 151693, "urlhaus_id": "3929206", "url": "http://115.148.236.154:45949/i", "host": "115.148.236.154", "host_ip": "115.148.236.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 12:32:17 UTC", "discovered_at": "2026-10-05T12:32:17.000Z" }, { "id": 151694, "urlhaus_id": "3929205", "url": "https://github.com/kizzyman1/wps/releases/download/v1/nu.txt", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "connectwise, rmm, screenconnect", "last_online": null, "first_seen": "2026-10-05 12:18:23 UTC", "discovered_at": "2026-10-05T12:18:23.000Z" }, { "id": 151695, "urlhaus_id": "3929204", "url": "http://190.103.67.242:48259/i", "host": "190.103.67.242", "host_ip": "190.103.67.242", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 12:18:19 UTC", "discovered_at": "2026-10-05T12:18:19.000Z" }, { "id": 151696, "urlhaus_id": "3929203", "url": "http://222.127.170.84:44966/i", "host": "222.127.170.84", "host_ip": "222.127.170.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 12:18:17 UTC", "discovered_at": "2026-10-05T12:18:17.000Z" }, { "id": 151697, "urlhaus_id": "3929202", "url": "https://uu.v2raynapps.com.cn/UU_aNCcWz7.zip", "host": "uu.v2raynapps.com.cn", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilverFox, ValleyRAT", "last_online": null, "first_seen": "2026-10-05 12:17:31 UTC", "discovered_at": "2026-10-05T12:17:31.000Z" }, { "id": 151698, "urlhaus_id": "3929201", "url": "http://117.82.160.238:59175/bin.sh", "host": "117.82.160.238", "host_ip": "117.82.160.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 12:14:42 UTC", "discovered_at": "2026-10-05T12:14:42.000Z" }, { "id": 151701, "urlhaus_id": "3929200", "url": "http://175.148.132.138:36307/bin.sh", "host": "175.148.132.138", "host_ip": "175.148.132.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-05 12:14:29 UTC", "discovered_at": "2026-10-05T12:14:29.000Z" }, { "id": 151700, "urlhaus_id": "3929199", "url": "http://42.57.203.4:57127/bin.sh", "host": "42.57.203.4", "host_ip": "42.57.203.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-05 12:14:29 UTC", "discovered_at": "2026-10-05T12:14:29.000Z" }, { "id": 151699, "urlhaus_id": "3929198", "url": "http://221.15.184.149:47239/bin.sh", "host": "221.15.184.149", "host_ip": "221.15.184.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 12:14:29 UTC", "discovered_at": "2026-10-05T12:14:29.000Z" }, { "id": 151702, "urlhaus_id": "3929197", "url": "https://github.com/HunterTeamC2/huynhtoanupload/raw/refs/heads/main/sirusrat.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-05 12:14:21 UTC", "discovered_at": "2026-10-05T12:14:21.000Z" }, { "id": 151703, "urlhaus_id": "3929196", "url": "http://115.55.82.43:41816/i", "host": "115.55.82.43", "host_ip": "115.55.82.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 12:05:22 UTC", "discovered_at": "2026-10-05T12:05:22.000Z" }, { "id": 151705, "urlhaus_id": "3929195", "url": "http://115.49.125.201:51388/i", "host": "115.49.125.201", "host_ip": "115.49.125.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 12:02:18 UTC", "discovered_at": "2026-10-05T12:02:18.000Z" }, { "id": 151704, "urlhaus_id": "3929194", "url": "http://185.214.17.203:34053/bin.sh", "host": "185.214.17.203", "host_ip": "185.214.17.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 12:02:18 UTC", "discovered_at": "2026-10-05T12:02:18.000Z" }, { "id": 151706, "urlhaus_id": "3929193", "url": "http://27.215.123.59:54044/bin.sh", "host": "27.215.123.59", "host_ip": "27.215.123.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 12:02:17 UTC", "discovered_at": "2026-10-05T12:02:17.000Z" }, { "id": 151707, "urlhaus_id": "3929192", "url": "http://190.103.67.242:48259/bin.sh", "host": "190.103.67.242", "host_ip": "190.103.67.242", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 11:47:28 UTC", "discovered_at": "2026-10-05T11:47:28.000Z" }, { "id": 151708, "urlhaus_id": "3929191", "url": "http://105.224.19.165:45811/i", "host": "105.224.19.165", "host_ip": "105.224.19.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:47:13 UTC", "discovered_at": "2026-10-05T11:47:13.000Z" }, { "id": 151709, "urlhaus_id": "3929190", "url": "http://119.116.34.6:57421/i", "host": "119.116.34.6", "host_ip": "119.116.34.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 11:47:11 UTC", "discovered_at": "2026-10-05T11:47:11.000Z" }, { "id": 151711, "urlhaus_id": "3929189", "url": "http://123.14.122.4:41904/i", "host": "123.14.122.4", "host_ip": "123.14.122.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 11:46:21 UTC", "discovered_at": "2026-10-05T11:46:21.000Z" }, { "id": 151710, "urlhaus_id": "3929188", "url": "http://182.127.111.168:48486/i", "host": "182.127.111.168", "host_ip": "182.127.111.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 11:46:21 UTC", "discovered_at": "2026-10-05T11:46:21.000Z" }, { "id": 151714, "urlhaus_id": "3929187", "url": "http://222.127.170.84:44966/bin.sh", "host": "222.127.170.84", "host_ip": "222.127.170.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:46:20 UTC", "discovered_at": "2026-10-05T11:46:20.000Z" }, { "id": 151713, "urlhaus_id": "3929186", "url": "http://182.113.10.37:55101/i", "host": "182.113.10.37", "host_ip": "182.113.10.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 11:46:20 UTC", "discovered_at": "2026-10-05T11:46:20.000Z" }, { "id": 151712, "urlhaus_id": "3929185", "url": "http://165.98.243.83:39274/i", "host": "165.98.243.83", "host_ip": "165.98.243.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:46:20 UTC", "discovered_at": "2026-10-05T11:46:20.000Z" }, { "id": 151715, "urlhaus_id": "3929184", "url": "http://221.15.184.149:47239/i", "host": "221.15.184.149", "host_ip": "221.15.184.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 11:44:24 UTC", "discovered_at": "2026-10-05T11:44:24.000Z" }, { "id": 151716, "urlhaus_id": "3929183", "url": "http://115.55.82.43:41816/bin.sh", "host": "115.55.82.43", "host_ip": "115.55.82.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 11:42:17 UTC", "discovered_at": "2026-10-05T11:42:17.000Z" }, { "id": 151717, "urlhaus_id": "3929182", "url": "http://14.20.223.60:39837/bin.sh", "host": "14.20.223.60", "host_ip": "14.20.223.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 11:37:26 UTC", "discovered_at": "2026-10-05T11:37:26.000Z" }, { "id": 151718, "urlhaus_id": "3929181", "url": "http://60.18.82.10:35617/i", "host": "60.18.82.10", "host_ip": "60.18.82.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 11:31:33 UTC", "discovered_at": "2026-10-05T11:31:33.000Z" }, { "id": 151719, "urlhaus_id": "3929180", "url": "http://220.201.135.17:52961/i", "host": "220.201.135.17", "host_ip": "220.201.135.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 11:31:32 UTC", "discovered_at": "2026-10-05T11:31:32.000Z" }, { "id": 151720, "urlhaus_id": "3929179", "url": "http://182.113.10.37:55101/bin.sh", "host": "182.113.10.37", "host_ip": "182.113.10.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 11:31:26 UTC", "discovered_at": "2026-10-05T11:31:26.000Z" }, { "id": 151723, "urlhaus_id": "3929178", "url": "http://115.50.253.204:56195/i", "host": "115.50.253.204", "host_ip": "115.50.253.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:31:21 UTC", "discovered_at": "2026-10-05T11:31:21.000Z" }, { "id": 151722, "urlhaus_id": "3929177", "url": "http://36.24.252.179:43978/i", "host": "36.24.252.179", "host_ip": "36.24.252.179", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:31:21 UTC", "discovered_at": "2026-10-05T11:31:21.000Z" }, { "id": 151721, "urlhaus_id": "3929176", "url": "http://41.140.146.61:40103/i", "host": "41.140.146.61", "host_ip": "41.140.146.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 11:31:21 UTC", "discovered_at": "2026-10-05T11:31:21.000Z" }, { "id": 151725, "urlhaus_id": "3929175", "url": "http://210.208.110.42:41317/i", "host": "210.208.110.42", "host_ip": "210.208.110.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:31:20 UTC", "discovered_at": "2026-10-05T11:31:20.000Z" }, { "id": 151724, "urlhaus_id": "3929174", "url": "http://119.116.38.133:47105/bin.sh", "host": "119.116.38.133", "host_ip": "119.116.38.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 11:31:20 UTC", "discovered_at": "2026-10-05T11:31:20.000Z" }, { "id": 151726, "urlhaus_id": "3929173", "url": "http://36.64.184.26:53519/i", "host": "36.64.184.26", "host_ip": "36.64.184.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 11:29:27 UTC", "discovered_at": "2026-10-05T11:29:27.000Z" }, { "id": 151727, "urlhaus_id": "3929172", "url": "http://175.148.132.138:36307/i", "host": "175.148.132.138", "host_ip": "175.148.132.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mipsel, Mozi", "last_online": null, "first_seen": "2026-10-05 11:22:28 UTC", "discovered_at": "2026-10-05T11:22:28.000Z" }, { "id": 151728, "urlhaus_id": "3929171", "url": "http://59.180.128.60:41813/i", "host": "59.180.128.60", "host_ip": "59.180.128.60", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 11:16:38 UTC", "discovered_at": "2026-10-05T11:16:38.000Z" }, { "id": 151729, "urlhaus_id": "3929170", "url": "http://219.157.3.237:45422/bin.sh", "host": "219.157.3.237", "host_ip": "219.157.3.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 11:03:17 UTC", "discovered_at": "2026-10-05T11:03:17.000Z" }, { "id": 151730, "urlhaus_id": "3929169", "url": "http://171.114.231.229:54860/i", "host": "171.114.231.229", "host_ip": "171.114.231.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:02:28 UTC", "discovered_at": "2026-10-05T11:02:28.000Z" }, { "id": 151731, "urlhaus_id": "3929168", "url": "http://124.235.250.231:48552/i", "host": "124.235.250.231", "host_ip": "124.235.250.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 11:02:21 UTC", "discovered_at": "2026-10-05T11:02:21.000Z" }, { "id": 151732, "urlhaus_id": "3929167", "url": "http://115.63.246.105:59305/bin.sh", "host": "115.63.246.105", "host_ip": "115.63.246.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 11:02:14 UTC", "discovered_at": "2026-10-05T11:02:14.000Z" }, { "id": 151733, "urlhaus_id": "3929166", "url": "http://221.200.214.82:47346/i", "host": "221.200.214.82", "host_ip": "221.200.214.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:47:12 UTC", "discovered_at": "2026-10-05T10:47:12.000Z" }, { "id": 151734, "urlhaus_id": "3929165", "url": "http://221.14.188.177:35763/i", "host": "221.14.188.177", "host_ip": "221.14.188.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 10:36:28 UTC", "discovered_at": "2026-10-05T10:36:28.000Z" }, { "id": 151735, "urlhaus_id": "3929164", "url": "http://182.112.38.0:41326/i", "host": "182.112.38.0", "host_ip": "182.112.38.0", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 10:32:22 UTC", "discovered_at": "2026-10-05T10:32:22.000Z" }, { "id": 151737, "urlhaus_id": "3929163", "url": "http://117.211.74.14:33093/i", "host": "117.211.74.14", "host_ip": "117.211.74.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:32:17 UTC", "discovered_at": "2026-10-05T10:32:17.000Z" }, { "id": 151736, "urlhaus_id": "3929162", "url": "http://221.200.214.82:47346/bin.sh", "host": "221.200.214.82", "host_ip": "221.200.214.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:32:17 UTC", "discovered_at": "2026-10-05T10:32:17.000Z" }, { "id": 151739, "urlhaus_id": "3929161", "url": "http://182.118.244.148:40461/i", "host": "182.118.244.148", "host_ip": "182.118.244.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:32:16 UTC", "discovered_at": "2026-10-05T10:32:16.000Z" }, { "id": 151738, "urlhaus_id": "3929160", "url": "http://188.85.49.126:39652/i", "host": "188.85.49.126", "host_ip": "188.85.49.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:32:16 UTC", "discovered_at": "2026-10-05T10:32:16.000Z" }, { "id": 151740, "urlhaus_id": "3929159", "url": "http://112.198.130.112:60949/i", "host": "112.198.130.112", "host_ip": "112.198.130.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 10:17:16 UTC", "discovered_at": "2026-10-05T10:17:16.000Z" }, { "id": 151743, "urlhaus_id": "3929158", "url": "http://120.43.45.73:46074/i", "host": "120.43.45.73", "host_ip": "120.43.45.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 10:17:15 UTC", "discovered_at": "2026-10-05T10:17:15.000Z" }, { "id": 151742, "urlhaus_id": "3929157", "url": "http://222.142.251.56:45452/i", "host": "222.142.251.56", "host_ip": "222.142.251.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:17:15 UTC", "discovered_at": "2026-10-05T10:17:15.000Z" }, { "id": 151741, "urlhaus_id": "3929156", "url": "http://222.142.251.56:45452/bin.sh", "host": "222.142.251.56", "host_ip": "222.142.251.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:17:15 UTC", "discovered_at": "2026-10-05T10:17:15.000Z" }, { "id": 151744, "urlhaus_id": "3929155", "url": "http://42.5.109.239:50678/bin.sh", "host": "42.5.109.239", "host_ip": "42.5.109.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:17:13 UTC", "discovered_at": "2026-10-05T10:17:13.000Z" }, { "id": 151745, "urlhaus_id": "3929154", "url": "http://62.60.226.140/files/8468794285/FTJnsGB.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-05 10:12:13 UTC", "discovered_at": "2026-10-05T10:12:13.000Z" }, { "id": 151746, "urlhaus_id": "3929153", "url": "http://221.14.188.177:35763/bin.sh", "host": "221.14.188.177", "host_ip": "221.14.188.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 10:10:25 UTC", "discovered_at": "2026-10-05T10:10:25.000Z" }, { "id": 151747, "urlhaus_id": "3929152", "url": "http://119.116.38.133:47105/i", "host": "119.116.38.133", "host_ip": "119.116.38.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:01:33 UTC", "discovered_at": "2026-10-05T10:01:33.000Z" }, { "id": 151755, "urlhaus_id": "3929151", "url": "http://42.55.37.26:37047/i", "host": "42.55.37.26", "host_ip": "42.55.37.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151754, "urlhaus_id": "3929150", "url": "http://117.26.226.154:39358/i", "host": "117.26.226.154", "host_ip": "117.26.226.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151753, "urlhaus_id": "3929149", "url": "http://182.113.212.178:39726/i", "host": "182.113.212.178", "host_ip": "182.113.212.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151752, "urlhaus_id": "3929148", "url": "http://27.215.52.181:32774/i", "host": "27.215.52.181", "host_ip": "27.215.52.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151751, "urlhaus_id": "3929147", "url": "http://222.142.245.17:45606/bin.sh", "host": "222.142.245.17", "host_ip": "222.142.245.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151750, "urlhaus_id": "3929146", "url": "http://182.118.244.148:40461/bin.sh", "host": "182.118.244.148", "host_ip": "182.118.244.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151749, "urlhaus_id": "3929145", "url": "http://188.85.49.126:39652/bin.sh", "host": "188.85.49.126", "host_ip": "188.85.49.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151748, "urlhaus_id": "3929144", "url": "http://27.215.52.181:32774/bin.sh", "host": "27.215.52.181", "host_ip": "27.215.52.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 10:01:25 UTC", "discovered_at": "2026-10-05T10:01:25.000Z" }, { "id": 151756, "urlhaus_id": "3929143", "url": "https://eo3wuo9z334anlh.m.pipedream.net/ssh_", "host": "eo3wuo9z334anlh.m.pipedream.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:00:34 UTC", "discovered_at": "2026-10-05T10:00:34.000Z" }, { "id": 151757, "urlhaus_id": "3929142", "url": "http://66.116.243.130/zedi", "host": "66.116.243.130", "host_ip": "66.116.243.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 10:00:19 UTC", "discovered_at": "2026-10-05T10:00:19.000Z" }, { "id": 151758, "urlhaus_id": "3929141", "url": "http://91.92.242.236/files-129312398/files/file_0d808c6ece797f4b.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-05 09:55:19 UTC", "discovered_at": "2026-10-05T09:55:19.000Z" }, { "id": 151759, "urlhaus_id": "3929140", "url": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/dll%2Ftest%20DLL%20procesos.txt?alt=media&token=2bf65d96-1f62-419e-9e8c-83f20877a53b", "host": "firebasestorage.googleapis.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, base64-loader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-05 09:53:15 UTC", "discovered_at": "2026-10-05T09:53:15.000Z" }, { "id": 151760, "urlhaus_id": "3929139", "url": "https://www.tmcksa.com/new1/secured_stub.ps1", "host": "www.tmcksa.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:53:14 UTC", "discovered_at": "2026-10-05T09:53:14.000Z" }, { "id": 151761, "urlhaus_id": "3929138", "url": "http://fujeigroup.com:8888/web/img_010950.png", "host": "fujeigroup.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, rat, stego", "last_online": null, "first_seen": "2026-10-05 09:52:17 UTC", "discovered_at": "2026-10-05T09:52:17.000Z" }, { "id": 151762, "urlhaus_id": "3929137", "url": "http://60.22.178.193:40491/i", "host": "60.22.178.193", "host_ip": "60.22.178.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 09:46:16 UTC", "discovered_at": "2026-10-05T09:46:16.000Z" }, { "id": 151764, "urlhaus_id": "3929136", "url": "http://61.52.78.135:57433/bin.sh", "host": "61.52.78.135", "host_ip": "61.52.78.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:46:14 UTC", "discovered_at": "2026-10-05T09:46:14.000Z" }, { "id": 151763, "urlhaus_id": "3929135", "url": "http://112.140.190.99:51506/i", "host": "112.140.190.99", "host_ip": "112.140.190.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:46:14 UTC", "discovered_at": "2026-10-05T09:46:14.000Z" }, { "id": 151768, "urlhaus_id": "3929134", "url": "http://45.172.218.181:39068/i", "host": "45.172.218.181", "host_ip": "45.172.218.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:46:13 UTC", "discovered_at": "2026-10-05T09:46:13.000Z" }, { "id": 151767, "urlhaus_id": "3929133", "url": "http://103.151.42.13:57073/i", "host": "103.151.42.13", "host_ip": "103.151.42.13", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:46:13 UTC", "discovered_at": "2026-10-05T09:46:13.000Z" }, { "id": 151766, "urlhaus_id": "3929132", "url": "http://37.55.197.12:58989/i", "host": "37.55.197.12", "host_ip": "37.55.197.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:46:13 UTC", "discovered_at": "2026-10-05T09:46:13.000Z" }, { "id": 151765, "urlhaus_id": "3929131", "url": "http://37.55.197.12:58989/bin.sh", "host": "37.55.197.12", "host_ip": "37.55.197.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:46:13 UTC", "discovered_at": "2026-10-05T09:46:13.000Z" }, { "id": 151770, "urlhaus_id": "3929130", "url": "http://primeemberq.cfd/Subtrahuyr.pcx", "host": "primeemberq.cfd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader", "last_online": null, "first_seen": "2026-10-05 09:37:15 UTC", "discovered_at": "2026-10-05T09:37:15.000Z" }, { "id": 151769, "urlhaus_id": "3929129", "url": "http://172.245.155.97/33/GFG.hta", "host": "172.245.155.97", "host_ip": "172.245.155.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "hta, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-05 09:37:15 UTC", "discovered_at": "2026-10-05T09:37:15.000Z" }, { "id": 151773, "urlhaus_id": "3929128", "url": "http://94.154.43.26/bin/manta.aarch64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:30 UTC", "discovered_at": "2026-10-05T09:36:30.000Z" }, { "id": 151772, "urlhaus_id": "3929127", "url": "http://94.154.43.26/bin/manta.sh4", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:30 UTC", "discovered_at": "2026-10-05T09:36:30.000Z" }, { "id": 151771, "urlhaus_id": "3929126", "url": "http://94.154.43.26/bin/manta.arc", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:30 UTC", "discovered_at": "2026-10-05T09:36:30.000Z" }, { "id": 151778, "urlhaus_id": "3929125", "url": "http://94.154.43.26/bin/manta.armv7l", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:29 UTC", "discovered_at": "2026-10-05T09:36:29.000Z" }, { "id": 151777, "urlhaus_id": "3929124", "url": "http://94.154.43.26/bin/manta.ppc", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:29 UTC", "discovered_at": "2026-10-05T09:36:29.000Z" }, { "id": 151776, "urlhaus_id": "3929123", "url": "http://94.154.43.26/bin/manta.x86_64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:29 UTC", "discovered_at": "2026-10-05T09:36:29.000Z" }, { "id": 151775, "urlhaus_id": "3929122", "url": "http://94.154.43.26/bin/manta.armv6l", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:29 UTC", "discovered_at": "2026-10-05T09:36:29.000Z" }, { "id": 151774, "urlhaus_id": "3929121", "url": "http://94.154.43.26/bin/manta.i686", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:29 UTC", "discovered_at": "2026-10-05T09:36:29.000Z" }, { "id": 151779, "urlhaus_id": "3929120", "url": "https://fullhouse.ae/js/TRUE.zip", "host": "fullhouse.ae", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AgentTesla", "last_online": null, "first_seen": "2026-10-05 09:36:16 UTC", "discovered_at": "2026-10-05T09:36:16.000Z" }, { "id": 151782, "urlhaus_id": "3929119", "url": "http://94.154.43.26/bin/manta.mipsel", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:12 UTC", "discovered_at": "2026-10-05T09:36:12.000Z" }, { "id": 151781, "urlhaus_id": "3929118", "url": "http://94.154.43.26/bin/manta.mips", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:12 UTC", "discovered_at": "2026-10-05T09:36:12.000Z" }, { "id": 151780, "urlhaus_id": "3929117", "url": "http://94.154.43.26/bin/manta.m68k", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-26, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 09:36:12 UTC", "discovered_at": "2026-10-05T09:36:12.000Z" }, { "id": 151783, "urlhaus_id": "3929116", "url": "http://primeemberq.cfd/afbryderen.pcz", "host": "primeemberq.cfd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:32:16 UTC", "discovered_at": "2026-10-05T09:32:16.000Z" }, { "id": 151784, "urlhaus_id": "3929115", "url": "http://103.249.199.5:35908/bin.sh", "host": "103.249.199.5", "host_ip": "103.249.199.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 09:31:32 UTC", "discovered_at": "2026-10-05T09:31:32.000Z" }, { "id": 151785, "urlhaus_id": "3929114", "url": "https://www.tmcksa.com/new/secured_stub.ps1", "host": "www.tmcksa.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:31:24 UTC", "discovered_at": "2026-10-05T09:31:24.000Z" }, { "id": 151787, "urlhaus_id": "3929113", "url": "http://117.26.226.154:39358/bin.sh", "host": "117.26.226.154", "host_ip": "117.26.226.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:31:22 UTC", "discovered_at": "2026-10-05T09:31:22.000Z" }, { "id": 151786, "urlhaus_id": "3929112", "url": "https://drive.google.com/uc?export=download&id=19_FEhbNNHWCmu2_17hOWW-AoeR7HL1CB", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-05 09:31:22 UTC", "discovered_at": "2026-10-05T09:31:22.000Z" }, { "id": 151789, "urlhaus_id": "3929111", "url": "http://123.185.245.137:43701/i", "host": "123.185.245.137", "host_ip": "123.185.245.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:31:20 UTC", "discovered_at": "2026-10-05T09:31:20.000Z" }, { "id": 151788, "urlhaus_id": "3929110", "url": "http://182.126.94.236:51550/i", "host": "182.126.94.236", "host_ip": "182.126.94.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:31:20 UTC", "discovered_at": "2026-10-05T09:31:20.000Z" }, { "id": 151790, "urlhaus_id": "3929109", "url": "http://125.24.161.55:51224/i", "host": "125.24.161.55", "host_ip": "125.24.161.55", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:31:19 UTC", "discovered_at": "2026-10-05T09:31:19.000Z" }, { "id": 151791, "urlhaus_id": "3929108", "url": "https://new-orleans.pl/wp-includes/Text/bhxlvkt/erlodfc/stykqbz/puresecured_stub.ps1", "host": "new-orleans.pl", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:31:18 UTC", "discovered_at": "2026-10-05T09:31:18.000Z" }, { "id": 151792, "urlhaus_id": "3929107", "url": "https://www.beinke-aufzuege.de/components/com_media/fkqabmp/ntxqre1/edfwcgi/pwsecured_stub.ps1", "host": "www.beinke-aufzuege.de", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:30:18 UTC", "discovered_at": "2026-10-05T09:30:18.000Z" }, { "id": 151793, "urlhaus_id": "3929106", "url": "https://summitcapitalpatners.info/img_040049.png", "host": "summitcapitalpatners.info", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Formbook, stego", "last_online": null, "first_seen": "2026-10-05 09:29:19 UTC", "discovered_at": "2026-10-05T09:29:19.000Z" }, { "id": 151794, "urlhaus_id": "3929105", "url": "https://rough-truth-e072.publicftpresend.workers.dev/evbxwojeoy", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, Formbook", "last_online": null, "first_seen": "2026-10-05 09:29:17 UTC", "discovered_at": "2026-10-05T09:29:17.000Z" }, { "id": 151795, "urlhaus_id": "3929104", "url": "https://www.beinke-aufzuege.de/components/com_media/fkqabmp/ntxqre1/edfwcgi/mlsecured_stub.ps1", "host": "www.beinke-aufzuege.de", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:29:16 UTC", "discovered_at": "2026-10-05T09:29:16.000Z" }, { "id": 151796, "urlhaus_id": "3929103", "url": "https://www.tmcksa.com/news/secured_stub.ps1", "host": "www.tmcksa.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:28:17 UTC", "discovered_at": "2026-10-05T09:28:17.000Z" }, { "id": 151797, "urlhaus_id": "3929102", "url": "https://gloryhaven.org/bvbhfhdfb/ozTdkGeYgnmG211.bin", "host": "gloryhaven.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-05 09:26:19 UTC", "discovered_at": "2026-10-05T09:26:19.000Z" }, { "id": 151798, "urlhaus_id": "3929101", "url": "https://gloryhaven.org/bvbhfhdfb/obduktioners.lzh", "host": "gloryhaven.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-05 09:26:18 UTC", "discovered_at": "2026-10-05T09:26:18.000Z" }, { "id": 151799, "urlhaus_id": "3929100", "url": "https://greatwhite.me/tsl/Driftsregnskabets.lzh", "host": "greatwhite.me", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:25:24 UTC", "discovered_at": "2026-10-05T09:25:24.000Z" }, { "id": 151800, "urlhaus_id": "3929099", "url": "https://greatwhite.me/tsl/ChaWrHpZGxZKotQO101.bin", "host": "greatwhite.me", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:25:23 UTC", "discovered_at": "2026-10-05T09:25:23.000Z" }, { "id": 151801, "urlhaus_id": "3929098", "url": "https://razao.pt/GMV42B4J", "host": "razao.pt", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, powershell, ps1, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-05 09:25:22 UTC", "discovered_at": "2026-10-05T09:25:22.000Z" }, { "id": 151804, "urlhaus_id": "3929097", "url": "http://185.29.10.68/oHoxjRlk180.bin", "host": "185.29.10.68", "host_ip": "185.29.10.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:22:17 UTC", "discovered_at": "2026-10-05T09:22:17.000Z" }, { "id": 151803, "urlhaus_id": "3929096", "url": "http://185.29.9.42/sinkedes.mdp", "host": "185.29.9.42", "host_ip": "185.29.9.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:22:17 UTC", "discovered_at": "2026-10-05T09:22:17.000Z" }, { "id": 151802, "urlhaus_id": "3929095", "url": "http://185.29.10.68/HXzLYcjRlH96.bin", "host": "185.29.10.68", "host_ip": "185.29.10.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "encrypted, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:22:17 UTC", "discovered_at": "2026-10-05T09:22:17.000Z" }, { "id": 151805, "urlhaus_id": "3929094", "url": "https://drive.google.com/uc?export=download&id=182IdAap9K1RjdxYMxmNcc4Ku5X8olNRP", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "GuLoader", "last_online": null, "first_seen": "2026-10-05 09:21:15 UTC", "discovered_at": "2026-10-05T09:21:15.000Z" }, { "id": 151806, "urlhaus_id": "3929093", "url": "http://185.29.9.42/Marsupialised.java", "host": "185.29.9.42", "host_ip": "185.29.9.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:21:13 UTC", "discovered_at": "2026-10-05T09:21:13.000Z" }, { "id": 151807, "urlhaus_id": "3929092", "url": "http://122.241.141.55:46325/i", "host": "122.241.141.55", "host_ip": "122.241.141.55", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 09:18:27 UTC", "discovered_at": "2026-10-05T09:18:27.000Z" }, { "id": 151808, "urlhaus_id": "3929091", "url": "http://fujeigroup.com:8888/web/img_194859.png", "host": "fujeigroup.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, rat, stego", "last_online": null, "first_seen": "2026-10-05 09:17:13 UTC", "discovered_at": "2026-10-05T09:17:13.000Z" }, { "id": 151810, "urlhaus_id": "3929090", "url": "http://125.24.161.55:51224/bin.sh", "host": "125.24.161.55", "host_ip": "125.24.161.55", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:17:12 UTC", "discovered_at": "2026-10-05T09:17:12.000Z" }, { "id": 151809, "urlhaus_id": "3929089", "url": "http://27.204.198.22:36088/i", "host": "27.204.198.22", "host_ip": "27.204.198.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:17:12 UTC", "discovered_at": "2026-10-05T09:17:12.000Z" }, { "id": 151814, "urlhaus_id": "3929088", "url": "http://182.126.94.236:51550/bin.sh", "host": "182.126.94.236", "host_ip": "182.126.94.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:17:11 UTC", "discovered_at": "2026-10-05T09:17:11.000Z" }, { "id": 151813, "urlhaus_id": "3929087", "url": "http://119.116.33.224:35808/i", "host": "119.116.33.224", "host_ip": "119.116.33.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 09:17:11 UTC", "discovered_at": "2026-10-05T09:17:11.000Z" }, { "id": 151812, "urlhaus_id": "3929086", "url": "http://45.172.218.181:39068/bin.sh", "host": "45.172.218.181", "host_ip": "45.172.218.181", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:17:11 UTC", "discovered_at": "2026-10-05T09:17:11.000Z" }, { "id": 151811, "urlhaus_id": "3929085", "url": "http://144.48.121.51:35045/i", "host": "144.48.121.51", "host_ip": "144.48.121.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 09:17:11 UTC", "discovered_at": "2026-10-05T09:17:11.000Z" }, { "id": 151816, "urlhaus_id": "3929084", "url": "http://185.29.10.68/xdZGCANqNpylcDzT208.bin", "host": "185.29.10.68", "host_ip": "185.29.10.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, encrypted, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:16:20 UTC", "discovered_at": "2026-10-05T09:16:20.000Z" }, { "id": 151815, "urlhaus_id": "3929083", "url": "http://185.29.9.42/Retslokalet.lpk", "host": "185.29.9.42", "host_ip": "185.29.9.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, ascii, Encoded, GuLoader", "last_online": null, "first_seen": "2026-10-05 09:16:20 UTC", "discovered_at": "2026-10-05T09:16:20.000Z" }, { "id": 151818, "urlhaus_id": "3929082", "url": "https://firebasestorage.googleapis.com/v0/b/rodriakd-8413d.appspot.com/o/Pe%2Fp.txt?alt=media&token=3b6252a5-d440-41e5-8c4b-7a4ca3a27d8d", "host": "firebasestorage.googleapis.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, rat, RemcosRAT, rev-base64-loader", "last_online": null, "first_seen": "2026-10-05 09:15:19 UTC", "discovered_at": "2026-10-05T09:15:19.000Z" }, { "id": 151817, "urlhaus_id": "3929081", "url": "http://122.241.141.55:46325/bin.sh", "host": "122.241.141.55", "host_ip": "122.241.141.55", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 09:15:19 UTC", "discovered_at": "2026-10-05T09:15:19.000Z" }, { "id": 151819, "urlhaus_id": "3929080", "url": "https://kipmwh3pdc.ufs.sh/f/7bB6ZShjMtlzYRILavQ2dZqTu1ptjCGaU3Mn4wkcmF0IE7RA", "host": "kipmwh3pdc.ufs.sh", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, base64-loader, Encoded, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-05 09:15:18 UTC", "discovered_at": "2026-10-05T09:15:18.000Z" }, { "id": 151823, "urlhaus_id": "3929079", "url": "https://flocmaterials.shop/mrceofrnnd/secured_stub.ps1", "host": "flocmaterials.shop", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-05 09:14:11 UTC", "discovered_at": "2026-10-05T09:14:11.000Z" }, { "id": 151822, "urlhaus_id": "3929078", "url": "https://flocmaterials.shop/ceofrnd1/secured_stub.ps1", "host": "flocmaterials.shop", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-05 09:14:11 UTC", "discovered_at": "2026-10-05T09:14:11.000Z" }, { "id": 151821, "urlhaus_id": "3929077", "url": "https://flocmaterials.shop/myceo30/secured_stub.ps1", "host": "flocmaterials.shop", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-05 09:14:11 UTC", "discovered_at": "2026-10-05T09:14:11.000Z" }, { "id": 151820, "urlhaus_id": "3929076", "url": "https://flocmaterials.shop/ceofrnd29/secured_stub.ps1", "host": "flocmaterials.shop", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-05 09:14:11 UTC", "discovered_at": "2026-10-05T09:14:11.000Z" }, { "id": 151824, "urlhaus_id": "3929075", "url": "https://flocmaterials.shop/nzeceo/secured_stub.ps1", "host": "flocmaterials.shop", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, MassLogger, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-05 09:13:18 UTC", "discovered_at": "2026-10-05T09:13:18.000Z" }, { "id": 151825, "urlhaus_id": "3929074", "url": "http://wp.fujeigroup.com:8888/file/img_221841.png", "host": "wp.fujeigroup.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "opendir, stego", "last_online": null, "first_seen": "2026-10-05 09:09:18 UTC", "discovered_at": "2026-10-05T09:09:18.000Z" }, { "id": 151826, "urlhaus_id": "3929073", "url": "http://wp.fujeigroup.com:8888/file/img_132450.png", "host": "wp.fujeigroup.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, opendir, rat, stego", "last_online": null, "first_seen": "2026-10-05 09:09:17 UTC", "discovered_at": "2026-10-05T09:09:17.000Z" }, { "id": 151827, "urlhaus_id": "3929072", "url": "http://222.127.158.71:38125/i", "host": "222.127.158.71", "host_ip": "222.127.158.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 09:03:26 UTC", "discovered_at": "2026-10-05T09:03:26.000Z" }, { "id": 151829, "urlhaus_id": "3929071", "url": "http://23.132.164.15/FAST/stein.ps1", "host": "23.132.164.15", "host_ip": "23.132.164.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": "AgentTesla, ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:03:16 UTC", "discovered_at": "2026-10-05T09:03:16.000Z" }, { "id": 151828, "urlhaus_id": "3929070", "url": "http://94.154.32.130/b7823990/secured_stub.ps1", "host": "94.154.32.130", "host_ip": "94.154.32.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, MassLogger, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:03:16 UTC", "discovered_at": "2026-10-05T09:03:16.000Z" }, { "id": 151830, "urlhaus_id": "3929069", "url": "http://94.154.32.130/1stcoco/secured_stub.ps1", "host": "94.154.32.130", "host_ip": "94.154.32.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-05 09:03:15 UTC", "discovered_at": "2026-10-05T09:03:15.000Z" }, { "id": 151831, "urlhaus_id": "3929068", "url": "http://42.5.109.239:50678/i", "host": "42.5.109.239", "host_ip": "42.5.109.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 09:02:12 UTC", "discovered_at": "2026-10-05T09:02:12.000Z" }, { "id": 151832, "urlhaus_id": "3929067", "url": "http://115.63.246.105:59305/i", "host": "115.63.246.105", "host_ip": "115.63.246.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:01:23 UTC", "discovered_at": "2026-10-05T09:01:23.000Z" }, { "id": 151833, "urlhaus_id": "3929066", "url": "http://27.220.12.42:40376/bin.sh", "host": "27.220.12.42", "host_ip": "27.220.12.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 09:01:17 UTC", "discovered_at": "2026-10-05T09:01:17.000Z" }, { "id": 151834, "urlhaus_id": "3929065", "url": "http://210.208.111.234:36371/bin.sh", "host": "210.208.111.234", "host_ip": "210.208.111.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 08:58:26 UTC", "discovered_at": "2026-10-05T08:58:26.000Z" }, { "id": 151835, "urlhaus_id": "3929064", "url": "http://222.160.232.180:55655/i", "host": "222.160.232.180", "host_ip": "222.160.232.180", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 08:47:20 UTC", "discovered_at": "2026-10-05T08:47:20.000Z" }, { "id": 151836, "urlhaus_id": "3929063", "url": "http://119.116.33.224:35808/bin.sh", "host": "119.116.33.224", "host_ip": "119.116.33.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 08:47:16 UTC", "discovered_at": "2026-10-05T08:47:16.000Z" }, { "id": 151837, "urlhaus_id": "3929062", "url": "http://222.160.232.180:55655/bin.sh", "host": "222.160.232.180", "host_ip": "222.160.232.180", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 08:47:15 UTC", "discovered_at": "2026-10-05T08:47:15.000Z" }, { "id": 151838, "urlhaus_id": "3929061", "url": "http://61.52.213.183:50522/i", "host": "61.52.213.183", "host_ip": "61.52.213.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 08:47:14 UTC", "discovered_at": "2026-10-05T08:47:14.000Z" }, { "id": 151839, "urlhaus_id": "3929060", "url": "http://112.239.103.3:32832/i", "host": "112.239.103.3", "host_ip": "112.239.103.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 08:46:16 UTC", "discovered_at": "2026-10-05T08:46:16.000Z" }, { "id": 151840, "urlhaus_id": "3929059", "url": "http://123.170.112.184:33140/Mozi.m", "host": "123.170.112.184", "host_ip": "123.170.112.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 08:38:13 UTC", "discovered_at": "2026-10-05T08:38:13.000Z" }, { "id": 151841, "urlhaus_id": "3929058", "url": "http://39.79.64.231:35565/bin.sh", "host": "39.79.64.231", "host_ip": "39.79.64.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 08:32:17 UTC", "discovered_at": "2026-10-05T08:32:17.000Z" }, { "id": 151842, "urlhaus_id": "3929057", "url": "http://115.148.236.154:45949/bin.sh", "host": "115.148.236.154", "host_ip": "115.148.236.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 08:32:13 UTC", "discovered_at": "2026-10-05T08:32:13.000Z" }, { "id": 151843, "urlhaus_id": "3929056", "url": "http://42.56.35.53:39865/i", "host": "42.56.35.53", "host_ip": "42.56.35.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 08:16:27 UTC", "discovered_at": "2026-10-05T08:16:27.000Z" }, { "id": 151844, "urlhaus_id": "3929055", "url": "http://61.52.213.183:50522/bin.sh", "host": "61.52.213.183", "host_ip": "61.52.213.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 08:16:15 UTC", "discovered_at": "2026-10-05T08:16:15.000Z" }, { "id": 151847, "urlhaus_id": "3929054", "url": "http://59.96.138.225:57188/i", "host": "59.96.138.225", "host_ip": "59.96.138.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 08:16:14 UTC", "discovered_at": "2026-10-05T08:16:14.000Z" }, { "id": 151846, "urlhaus_id": "3929053", "url": "http://116.140.161.144:43891/i", "host": "116.140.161.144", "host_ip": "116.140.161.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 08:16:14 UTC", "discovered_at": "2026-10-05T08:16:14.000Z" }, { "id": 151845, "urlhaus_id": "3929052", "url": "http://42.230.54.114:59512/bin.sh", "host": "42.230.54.114", "host_ip": "42.230.54.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 08:16:14 UTC", "discovered_at": "2026-10-05T08:16:14.000Z" }, { "id": 151848, "urlhaus_id": "3929051", "url": "http://42.56.35.53:39865/bin.sh", "host": "42.56.35.53", "host_ip": "42.56.35.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 08:01:20 UTC", "discovered_at": "2026-10-05T08:01:20.000Z" }, { "id": 151849, "urlhaus_id": "3929050", "url": "http://175.165.85.159:59144/i", "host": "175.165.85.159", "host_ip": "175.165.85.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 08:01:19 UTC", "discovered_at": "2026-10-05T08:01:19.000Z" }, { "id": 151850, "urlhaus_id": "3929049", "url": "http://119.109.210.22:55906/i", "host": "119.109.210.22", "host_ip": "119.109.210.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 08:01:18 UTC", "discovered_at": "2026-10-05T08:01:18.000Z" }, { "id": 151852, "urlhaus_id": "3929048", "url": "http://182.119.176.144:32888/i", "host": "182.119.176.144", "host_ip": "182.119.176.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 08:01:17 UTC", "discovered_at": "2026-10-05T08:01:17.000Z" }, { "id": 151851, "urlhaus_id": "3929047", "url": "http://27.207.127.39:33178/i", "host": "27.207.127.39", "host_ip": "27.207.127.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 08:01:17 UTC", "discovered_at": "2026-10-05T08:01:17.000Z" }, { "id": 151853, "urlhaus_id": "3929046", "url": "http://116.140.161.144:43891/bin.sh", "host": "116.140.161.144", "host_ip": "116.140.161.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 07:47:13 UTC", "discovered_at": "2026-10-05T07:47:13.000Z" }, { "id": 151854, "urlhaus_id": "3929045", "url": "http://27.207.127.39:33178/bin.sh", "host": "27.207.127.39", "host_ip": "27.207.127.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 07:47:12 UTC", "discovered_at": "2026-10-05T07:47:12.000Z" }, { "id": 151855, "urlhaus_id": "3929044", "url": "http://36.69.66.206:40622/bin.sh", "host": "36.69.66.206", "host_ip": "36.69.66.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 07:46:29 UTC", "discovered_at": "2026-10-05T07:46:29.000Z" }, { "id": 151857, "urlhaus_id": "3929043", "url": "http://117.190.134.253:42921/i", "host": "117.190.134.253", "host_ip": "117.190.134.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 07:46:19 UTC", "discovered_at": "2026-10-05T07:46:19.000Z" }, { "id": 151856, "urlhaus_id": "3929042", "url": "http://59.96.138.225:57188/bin.sh", "host": "59.96.138.225", "host_ip": "59.96.138.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 07:46:19 UTC", "discovered_at": "2026-10-05T07:46:19.000Z" }, { "id": 151858, "urlhaus_id": "3929041", "url": "http://mailservicesgroup.org/payload.bin", "host": "mailservicesgroup.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 07:46:18 UTC", "discovered_at": "2026-10-05T07:46:18.000Z" }, { "id": 151859, "urlhaus_id": "3929040", "url": "https://metabolism-effectively-logo-chrome.trycloudflare.com/Runner.exe", "host": "metabolism-effectively-logo-chrome.trycloudflare.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-05 07:44:12 UTC", "discovered_at": "2026-10-05T07:44:12.000Z" }, { "id": 151860, "urlhaus_id": "3929039", "url": "http://59.180.133.124:55956/i", "host": "59.180.133.124", "host_ip": "59.180.133.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 07:39:42 UTC", "discovered_at": "2026-10-05T07:39:42.000Z" }, { "id": 151861, "urlhaus_id": "3929038", "url": "http://221.13.234.161:40928/bin.sh", "host": "221.13.234.161", "host_ip": "221.13.234.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 07:33:15 UTC", "discovered_at": "2026-10-05T07:33:15.000Z" }, { "id": 151864, "urlhaus_id": "3929037", "url": "http://96.62.71.5:8091/bots/bot.s390x", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:31 UTC", "discovered_at": "2026-10-05T07:32:31.000Z" }, { "id": 151863, "urlhaus_id": "3929036", "url": "http://96.62.71.5:8091/bots/mb.mips64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:31 UTC", "discovered_at": "2026-10-05T07:32:31.000Z" }, { "id": 151862, "urlhaus_id": "3929035", "url": "http://96.62.71.5:8091/bots/mb.mips64le", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:31 UTC", "discovered_at": "2026-10-05T07:32:31.000Z" }, { "id": 151889, "urlhaus_id": "3929034", "url": "http://96.62.71.5:8091/bots/bot.riscv64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151888, "urlhaus_id": "3929033", "url": "http://96.62.71.5:8091/bots/bot.ppc64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151887, "urlhaus_id": "3929032", "url": "http://96.62.71.5:8091/bots/mb.arm64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, LiquorBot, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151886, "urlhaus_id": "3929031", "url": "http://96.62.71.5:8091/bots/mb.mips", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151885, "urlhaus_id": "3929030", "url": "http://96.62.71.5:8091/bots/bot.ppc64le", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151884, "urlhaus_id": "3929029", "url": "http://96.62.71.5:8091/bots/mb.386", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151883, "urlhaus_id": "3929028", "url": "http://96.62.71.5:8091/bots/bot.amd64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151882, "urlhaus_id": "3929027", "url": "http://96.62.71.5:8091/bots/go_bot.mips.bak", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151881, "urlhaus_id": "3929026", "url": "http://96.62.71.5:8091/bots/go_bot.arm.bak", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151880, "urlhaus_id": "3929025", "url": "http://96.62.71.5:8091/bots/mb.arm", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151879, "urlhaus_id": "3929024", "url": "http://96.62.71.5:8091/bots/bot.386", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151878, "urlhaus_id": "3929023", "url": "http://96.62.71.5:8091/bots/bot.arm", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151877, "urlhaus_id": "3929022", "url": "http://96.62.71.5:8091/bots/dldr.mipsle", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151876, "urlhaus_id": "3929021", "url": "http://96.62.71.5:8091/bots/mb.amd64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151875, "urlhaus_id": "3929020", "url": "http://96.62.71.5:8091/bots/bot.mipsle", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151874, "urlhaus_id": "3929019", "url": "http://96.62.71.5:8091/bots/dldr.aarch64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151873, "urlhaus_id": "3929018", "url": "http://96.62.71.5:8091/bots/dldr.arm", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151872, "urlhaus_id": "3929017", "url": "http://96.62.71.5:8091/bots/dldr.mips", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151871, "urlhaus_id": "3929016", "url": "http://96.62.71.5:8091/bots/dldr.amd64test", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151870, "urlhaus_id": "3929015", "url": "http://96.62.71.5:8091/bots/bot.aarch64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151869, "urlhaus_id": "3929014", "url": "http://96.62.71.5:8091/bots/dldr.386", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151868, "urlhaus_id": "3929013", "url": "http://96.62.71.5:8091/bots/bot.mips64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151867, "urlhaus_id": "3929012", "url": "http://96.62.71.5:8091/bots/bot.mips", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151866, "urlhaus_id": "3929011", "url": "http://96.62.71.5:8091/bots/bot.mips64le", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151865, "urlhaus_id": "3929010", "url": "http://96.62.71.5:8091/bots/dldr.amd64", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 07:32:30 UTC", "discovered_at": "2026-10-05T07:32:30.000Z" }, { "id": 151890, "urlhaus_id": "3929009", "url": "http://221.13.234.161:40928/i", "host": "221.13.234.161", "host_ip": "221.13.234.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 07:32:14 UTC", "discovered_at": "2026-10-05T07:32:14.000Z" }, { "id": 151891, "urlhaus_id": "3929008", "url": "http://175.149.111.124:37912/i", "host": "175.149.111.124", "host_ip": "175.149.111.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 07:32:13 UTC", "discovered_at": "2026-10-05T07:32:13.000Z" }, { "id": 151892, "urlhaus_id": "3929007", "url": "http://42.238.209.127:59421/i", "host": "42.238.209.127", "host_ip": "42.238.209.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 07:30:24 UTC", "discovered_at": "2026-10-05T07:30:24.000Z" }, { "id": 151893, "urlhaus_id": "3929006", "url": "http://117.207.115.38:48740/i", "host": "117.207.115.38", "host_ip": "117.207.115.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 07:16:30 UTC", "discovered_at": "2026-10-05T07:16:30.000Z" }, { "id": 151894, "urlhaus_id": "3929005", "url": "http://171.213.166.96:41669/i", "host": "171.213.166.96", "host_ip": "171.213.166.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 07:16:23 UTC", "discovered_at": "2026-10-05T07:16:23.000Z" }, { "id": 151895, "urlhaus_id": "3929004", "url": "http://170.84.133.234:32955/i", "host": "170.84.133.234", "host_ip": "170.84.133.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 07:16:22 UTC", "discovered_at": "2026-10-05T07:16:22.000Z" }, { "id": 151896, "urlhaus_id": "3929003", "url": "http://27.220.12.42:40376/i", "host": "27.220.12.42", "host_ip": "27.220.12.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 07:14:18 UTC", "discovered_at": "2026-10-05T07:14:18.000Z" }, { "id": 151897, "urlhaus_id": "3929002", "url": "http://60.177.183.108:47845/i", "host": "60.177.183.108", "host_ip": "60.177.183.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 07:02:18 UTC", "discovered_at": "2026-10-05T07:02:18.000Z" }, { "id": 151899, "urlhaus_id": "3929001", "url": "http://175.149.111.124:37912/bin.sh", "host": "175.149.111.124", "host_ip": "175.149.111.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 07:01:13 UTC", "discovered_at": "2026-10-05T07:01:13.000Z" }, { "id": 151898, "urlhaus_id": "3929000", "url": "http://105.184.126.95:37601/bin.sh", "host": "105.184.126.95", "host_ip": "105.184.126.95", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 07:01:13 UTC", "discovered_at": "2026-10-05T07:01:13.000Z" }, { "id": 151900, "urlhaus_id": "3928999", "url": "http://27.222.53.194:50691/i", "host": "27.222.53.194", "host_ip": "27.222.53.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 07:01:12 UTC", "discovered_at": "2026-10-05T07:01:12.000Z" }, { "id": 151901, "urlhaus_id": "3928998", "url": "http://176.65.139.139/main_x86", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 06:56:24 UTC", "discovered_at": "2026-10-05T06:56:24.000Z" }, { "id": 151908, "urlhaus_id": "3928997", "url": "http://179.61.221.162/bins/morte.arm5", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:20 UTC", "discovered_at": "2026-10-05T06:47:20.000Z" }, { "id": 151907, "urlhaus_id": "3928996", "url": "http://179.61.221.162/bins/morte.mpsl", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:20 UTC", "discovered_at": "2026-10-05T06:47:20.000Z" }, { "id": 151906, "urlhaus_id": "3928995", "url": "http://179.61.221.162/bins/morte.arm", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:20 UTC", "discovered_at": "2026-10-05T06:47:20.000Z" }, { "id": 151905, "urlhaus_id": "3928994", "url": "http://179.61.221.162/bins/morte.mips", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:20 UTC", "discovered_at": "2026-10-05T06:47:20.000Z" }, { "id": 151904, "urlhaus_id": "3928993", "url": "http://179.61.221.162/bins/morte.arm7", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:20 UTC", "discovered_at": "2026-10-05T06:47:20.000Z" }, { "id": 151903, "urlhaus_id": "3928992", "url": "http://179.61.221.162/bins/morte.arm6", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:20 UTC", "discovered_at": "2026-10-05T06:47:20.000Z" }, { "id": 151902, "urlhaus_id": "3928991", "url": "http://179.61.221.162/bins/morte.x86", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:20 UTC", "discovered_at": "2026-10-05T06:47:20.000Z" }, { "id": 151909, "urlhaus_id": "3928990", "url": "http://179.61.221.162/bins/morte.x86_64", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:47:12 UTC", "discovered_at": "2026-10-05T06:47:12.000Z" }, { "id": 151910, "urlhaus_id": "3928989", "url": "http://176.65.134.119/agent_i.sh", "host": "176.65.134.119", "host_ip": "176.65.134.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-05 06:35:11 UTC", "discovered_at": "2026-10-05T06:35:11.000Z" }, { "id": 151914, "urlhaus_id": "3928988", "url": "http://27.222.53.194:50691/bin.sh", "host": "27.222.53.194", "host_ip": "27.222.53.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:32:17 UTC", "discovered_at": "2026-10-05T06:32:17.000Z" }, { "id": 151913, "urlhaus_id": "3928987", "url": "http://120.28.195.161:56960/i", "host": "120.28.195.161", "host_ip": "120.28.195.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:32:17 UTC", "discovered_at": "2026-10-05T06:32:17.000Z" }, { "id": 151912, "urlhaus_id": "3928986", "url": "http://183.35.50.162:40190/i", "host": "183.35.50.162", "host_ip": "183.35.50.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:32:17 UTC", "discovered_at": "2026-10-05T06:32:17.000Z" }, { "id": 151911, "urlhaus_id": "3928985", "url": "http://42.56.148.18:37031/i", "host": "42.56.148.18", "host_ip": "42.56.148.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:32:17 UTC", "discovered_at": "2026-10-05T06:32:17.000Z" }, { "id": 151915, "urlhaus_id": "3928984", "url": "http://115.57.215.75:48432/i", "host": "115.57.215.75", "host_ip": "115.57.215.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 06:31:17 UTC", "discovered_at": "2026-10-05T06:31:17.000Z" }, { "id": 151916, "urlhaus_id": "3928983", "url": "http://210.208.110.147:47846/i", "host": "210.208.110.147", "host_ip": "210.208.110.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:31:16 UTC", "discovered_at": "2026-10-05T06:31:16.000Z" }, { "id": 151917, "urlhaus_id": "3928982", "url": "http://176.65.139.36/bot.armv7l", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:30:19 UTC", "discovered_at": "2026-10-05T06:30:19.000Z" }, { "id": 151922, "urlhaus_id": "3928981", "url": "http://176.65.139.36/bot.aarch64", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:30:18 UTC", "discovered_at": "2026-10-05T06:30:18.000Z" }, { "id": 151921, "urlhaus_id": "3928980", "url": "http://176.65.139.36/bot.mipsel", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:30:18 UTC", "discovered_at": "2026-10-05T06:30:18.000Z" }, { "id": 151920, "urlhaus_id": "3928979", "url": "http://176.65.139.36/bot.x86", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:30:18 UTC", "discovered_at": "2026-10-05T06:30:18.000Z" }, { "id": 151919, "urlhaus_id": "3928978", "url": "http://176.65.139.36/bot.mips", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:30:18 UTC", "discovered_at": "2026-10-05T06:30:18.000Z" }, { "id": 151918, "urlhaus_id": "3928977", "url": "http://176.65.139.36/bot.x86_64", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:30:18 UTC", "discovered_at": "2026-10-05T06:30:18.000Z" }, { "id": 151923, "urlhaus_id": "3928976", "url": "http://179.61.221.162/m.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, bash, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:29:15 UTC", "discovered_at": "2026-10-05T06:29:15.000Z" }, { "id": 151924, "urlhaus_id": "3928975", "url": "http://179.61.221.162/b.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, bash, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:29:14 UTC", "discovered_at": "2026-10-05T06:29:14.000Z" }, { "id": 151925, "urlhaus_id": "3928974", "url": "https://api.darkside.cy/Stb/Retev.php?bl=IrThUp3cp1Vg1SbT9BPRE008.txt", "host": "api.darkside.cy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Darkside.cy, DarkSideRAT, luckyware", "last_online": null, "first_seen": "2026-10-05 06:24:25 UTC", "discovered_at": "2026-10-05T06:24:25.000Z" }, { "id": 151926, "urlhaus_id": "3928973", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/crackexe.exe", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-05 06:24:22 UTC", "discovered_at": "2026-10-05T06:24:22.000Z" }, { "id": 151929, "urlhaus_id": "3928972", "url": "https://exo-api.tf/Stb/Retev.php?bl=IrThUp3cp1Vg1SbT9BPRE008.txt", "host": "exo-api.tf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Darkside.cy, DarkSideRAT, luckyware", "last_online": null, "first_seen": "2026-10-05 06:24:19 UTC", "discovered_at": "2026-10-05T06:24:19.000Z" }, { "id": 151928, "urlhaus_id": "3928971", "url": "https://devruntime.cy/Stb/Retev.php?bl=IrThUp3cp1Vg1SbT9BPRE008.txt", "host": "devruntime.cy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Darkside.cy, DarkSideRAT, luckyware", "last_online": null, "first_seen": "2026-10-05 06:24:19 UTC", "discovered_at": "2026-10-05T06:24:19.000Z" }, { "id": 151927, "urlhaus_id": "3928970", "url": "https://pee-files.nl/Stb/Retev.php?bl=IrThUp3cp1Vg1SbT9BPRE008.txt", "host": "pee-files.nl", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Darkside.cy, DarkSideRAT, luckyware", "last_online": null, "first_seen": "2026-10-05 06:24:19 UTC", "discovered_at": "2026-10-05T06:24:19.000Z" }, { "id": 151930, "urlhaus_id": "3928969", "url": "https://seitinloelinsa.com/setup.zip", "host": "seitinloelinsa.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:23:59 UTC", "discovered_at": "2026-10-05T06:23:59.000Z" }, { "id": 151931, "urlhaus_id": "3928968", "url": "https://fkjhsdfg478fdm.com/update.zip", "host": "fkjhsdfg478fdm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:23:32 UTC", "discovered_at": "2026-10-05T06:23:32.000Z" }, { "id": 151932, "urlhaus_id": "3928967", "url": "https://www.dropbox.com/scl/fi/l8sjr2ojv65jdlgcqzja3/Tokenized-Real-Estate-Investment-Platform.tar.gz?rlkey=w48p2fpq591lxue4xyq0caws0", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, DPRK, githook", "last_online": null, "first_seen": "2026-10-05 06:23:23 UTC", "discovered_at": "2026-10-05T06:23:23.000Z" }, { "id": 151934, "urlhaus_id": "3928966", "url": "http://176.65.139.201/nyx_bot_linux_amd64_exec", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, mirai", "last_online": null, "first_seen": "2026-10-05 06:23:22 UTC", "discovered_at": "2026-10-05T06:23:22.000Z" }, { "id": 151933, "urlhaus_id": "3928965", "url": "https://github.com/outhackernuls090-hash/KryptonClient/raw/refs/heads/main/KryptonClient-1.21.1.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-05 06:23:22 UTC", "discovered_at": "2026-10-05T06:23:22.000Z" }, { "id": 151935, "urlhaus_id": "3928964", "url": "http://46.19.140.40:8443/payload.bin", "host": "46.19.140.40", "host_ip": "46.19.140.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "bin", "last_online": null, "first_seen": "2026-10-05 06:23:21 UTC", "discovered_at": "2026-10-05T06:23:21.000Z" }, { "id": 151936, "urlhaus_id": "3928963", "url": "http://112.195.117.249:45477/Mozi.a", "host": "112.195.117.249", "host_ip": "112.195.117.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 06:23:20 UTC", "discovered_at": "2026-10-05T06:23:20.000Z" }, { "id": 151937, "urlhaus_id": "3928962", "url": "http://123.11.13.78:34717/bin.sh", "host": "123.11.13.78", "host_ip": "123.11.13.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 06:23:19 UTC", "discovered_at": "2026-10-05T06:23:19.000Z" }, { "id": 151939, "urlhaus_id": "3928961", "url": "https://pee-files.nl/Stb/Retev.php?bl=QTuVl0PCseGLafunsZPRE008.txt", "host": "pee-files.nl", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "DarkSideRAT, luckyware", "last_online": null, "first_seen": "2026-10-05 06:23:18 UTC", "discovered_at": "2026-10-05T06:23:18.000Z" }, { "id": 151938, "urlhaus_id": "3928960", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/wanna.exe", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-05 06:23:18 UTC", "discovered_at": "2026-10-05T06:23:18.000Z" }, { "id": 151941, "urlhaus_id": "3928959", "url": "https://api.darkside.cy/Stb/Retev.php?bl=QTuVl0PCseGLafunsZPRE008.txt", "host": "api.darkside.cy", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "DarkSideRAT, luckyware", "last_online": null, "first_seen": "2026-10-05 06:23:17 UTC", "discovered_at": "2026-10-05T06:23:17.000Z" }, { "id": 151940, "urlhaus_id": "3928958", "url": "http://89.169.55.22:8080/Service.bat", "host": "89.169.55.22", "host_ip": "89.169.55.22", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:23:17 UTC", "discovered_at": "2026-10-05T06:23:17.000Z" }, { "id": 151942, "urlhaus_id": "3928957", "url": "http://91.92.242.236/files-129312398/files/file_74d923de39615d9b.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-05 06:23:16 UTC", "discovered_at": "2026-10-05T06:23:16.000Z" }, { "id": 151955, "urlhaus_id": "3928956", "url": "https://179.61.221.162/bins/morte.x86_64", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151954, "urlhaus_id": "3928955", "url": "https://179.61.221.162/bins/morte.arm", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151953, "urlhaus_id": "3928954", "url": "http://107.172.132.240/bins/87sbhas6as.mpsl", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151952, "urlhaus_id": "3928953", "url": "http://46.19.140.40:8443/loader.exe", "host": "46.19.140.40", "host_ip": "46.19.140.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe, Sliver", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151951, "urlhaus_id": "3928952", "url": "http://46.19.140.40:8443/SecurityHealthSys.exe", "host": "46.19.140.40", "host_ip": "46.19.140.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe, Sliver", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151950, "urlhaus_id": "3928951", "url": "http://107.172.132.240/bins/87sbhas6as.arm5", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151949, "urlhaus_id": "3928950", "url": "http://107.172.132.240/bins/87sbhas6as.sh4", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151948, "urlhaus_id": "3928949", "url": "http://80.225.83.93/wife.arm4", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151947, "urlhaus_id": "3928948", "url": "http://80.225.83.93/wife.i486", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151946, "urlhaus_id": "3928947", "url": "http://80.225.83.93/wife.ppc", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151945, "urlhaus_id": "3928946", "url": "http://143.20.154.42/bins/o.xml", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ActiveMQ", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151944, "urlhaus_id": "3928945", "url": "http://62.60.227.112/bins/miraint.spc", "host": "62.60.227.112", "host_ip": "62.60.227.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151943, "urlhaus_id": "3928944", "url": "http://62.60.227.112/bins/mirai.spc", "host": "62.60.227.112", "host_ip": "62.60.227.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:23:15 UTC", "discovered_at": "2026-10-05T06:23:15.000Z" }, { "id": 151959, "urlhaus_id": "3928943", "url": "https://kdglsj93fdslkg.com/q", "host": "kdglsj93fdslkg.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:23:14 UTC", "discovered_at": "2026-10-05T06:23:14.000Z" }, { "id": 151958, "urlhaus_id": "3928942", "url": "http://66.205.236.190:44470/bin.sh", "host": "66.205.236.190", "host_ip": "66.205.236.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, cowrie, elf, honeypot, mirai", "last_online": null, "first_seen": "2026-10-05 06:23:14 UTC", "discovered_at": "2026-10-05T06:23:14.000Z" }, { "id": 151957, "urlhaus_id": "3928941", "url": "https://brightlaunch-ext75642.vercel.app/api/m", "host": "brightlaunch-ext75642.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, DPRK, githook", "last_online": null, "first_seen": "2026-10-05 06:23:14 UTC", "discovered_at": "2026-10-05T06:23:14.000Z" }, { "id": 151956, "urlhaus_id": "3928940", "url": "https://brightlaunch-ext75642.vercel.app/api/l", "host": "brightlaunch-ext75642.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, DPRK, githook", "last_online": null, "first_seen": "2026-10-05 06:23:14 UTC", "discovered_at": "2026-10-05T06:23:14.000Z" }, { "id": 151961, "urlhaus_id": "3928939", "url": "https://brightlaunch-ext75642.vercel.app/api/w", "host": "brightlaunch-ext75642.vercel.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ContagiousInterview, DPRK, githook", "last_online": null, "first_seen": "2026-10-05 06:23:12 UTC", "discovered_at": "2026-10-05T06:23:12.000Z" }, { "id": 151960, "urlhaus_id": "3928938", "url": "http://166.0.100.70/rd.sh", "host": "166.0.100.70", "host_ip": "166.0.100.70", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "redis, shell-script", "last_online": null, "first_seen": "2026-10-05 06:23:12 UTC", "discovered_at": "2026-10-05T06:23:12.000Z" }, { "id": 151963, "urlhaus_id": "3928937", "url": "http://176.65.139.201/", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-05 06:23:11 UTC", "discovered_at": "2026-10-05T06:23:11.000Z" }, { "id": 151962, "urlhaus_id": "3928936", "url": "http://46.19.140.40:8443/server.py", "host": "46.19.140.40", "host_ip": "46.19.140.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "python", "last_online": null, "first_seen": "2026-10-05 06:23:11 UTC", "discovered_at": "2026-10-05T06:23:11.000Z" }, { "id": 151965, "urlhaus_id": "3928935", "url": "http://83.168.110.84/armv7", "host": "83.168.110.84", "host_ip": "83.168.110.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "adb, elf", "last_online": null, "first_seen": "2026-10-05 06:23:10 UTC", "discovered_at": "2026-10-05T06:23:10.000Z" }, { "id": 151964, "urlhaus_id": "3928934", "url": "http://91.92.242.236/files-129312398/files/file_445052c4284d9c68.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-05 06:23:10 UTC", "discovered_at": "2026-10-05T06:23:10.000Z" }, { "id": 151967, "urlhaus_id": "3928933", "url": "http://91.92.242.236/files-129312398/files/file_759e2651dc554c76.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-05 06:23:09 UTC", "discovered_at": "2026-10-05T06:23:09.000Z" }, { "id": 151966, "urlhaus_id": "3928932", "url": "http://85.137.53.167:5000/bins/o.xml", "host": "85.137.53.167", "host_ip": "85.137.53.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ActiveMQ", "last_online": null, "first_seen": "2026-10-05 06:23:09 UTC", "discovered_at": "2026-10-05T06:23:09.000Z" }, { "id": 151974, "urlhaus_id": "3928931", "url": "http://80.225.83.93/wife.apk", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:30 UTC", "discovered_at": "2026-10-05T06:22:30.000Z" }, { "id": 151973, "urlhaus_id": "3928930", "url": "http://80.225.83.93/wife.arm5", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:30 UTC", "discovered_at": "2026-10-05T06:22:30.000Z" }, { "id": 151972, "urlhaus_id": "3928929", "url": "http://80.225.83.93/wife.mpsl", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:30 UTC", "discovered_at": "2026-10-05T06:22:30.000Z" }, { "id": 151971, "urlhaus_id": "3928928", "url": "https://179.61.221.162/bins/morte.x86", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:30 UTC", "discovered_at": "2026-10-05T06:22:30.000Z" }, { "id": 151970, "urlhaus_id": "3928927", "url": "https://179.61.221.162/bins/morte.mips", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:30 UTC", "discovered_at": "2026-10-05T06:22:30.000Z" }, { "id": 151969, "urlhaus_id": "3928926", "url": "https://179.61.221.162/bins/morte.mpsl", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:30 UTC", "discovered_at": "2026-10-05T06:22:30.000Z" }, { "id": 151968, "urlhaus_id": "3928925", "url": "http://146.19.198.131/bins.sh", "host": "146.19.198.131", "host_ip": "146.19.198.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:30 UTC", "discovered_at": "2026-10-05T06:22:30.000Z" }, { "id": 151994, "urlhaus_id": "3928924", "url": "http://80.225.83.93/wife.sh4", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151993, "urlhaus_id": "3928923", "url": "https://179.61.221.162/3.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151992, "urlhaus_id": "3928922", "url": "http://107.172.132.240/bins/87sbhas6as.arm7", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151991, "urlhaus_id": "3928921", "url": "http://80.225.83.93/wife.i686", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151990, "urlhaus_id": "3928920", "url": "http://80.225.83.93/wife.ppc440", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151989, "urlhaus_id": "3928919", "url": "http://80.225.83.93/wife.x86", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151988, "urlhaus_id": "3928918", "url": "http://42.236.222.141:55168/bin.sh", "host": "42.236.222.141", "host_ip": "42.236.222.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151987, "urlhaus_id": "3928917", "url": "http://80.225.83.93/wife.m68k", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151986, "urlhaus_id": "3928916", "url": "http://80.225.83.93/wife.mips", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151985, "urlhaus_id": "3928915", "url": "http://80.225.83.93/wife.arm6", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151984, "urlhaus_id": "3928914", "url": "http://107.172.132.240/bins/87sbhas6as.arm", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151983, "urlhaus_id": "3928913", "url": "https://179.61.221.162/bins/morte.arm5", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151982, "urlhaus_id": "3928912", "url": "http://107.172.132.240/bins/87sbhas6as.m68k", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151981, "urlhaus_id": "3928911", "url": "http://107.172.132.240/bins/87sbhas6as.arm6", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151980, "urlhaus_id": "3928910", "url": "http://107.172.132.240/bins/87sbhas6as.x86", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151979, "urlhaus_id": "3928909", "url": "http://201.7.16.231/payload.sh", "host": "201.7.16.231", "host_ip": "201.7.16.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151978, "urlhaus_id": "3928908", "url": "http://107.172.132.240/bins/87sbhas6as.spc", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151977, "urlhaus_id": "3928907", "url": "https://179.61.221.162/bins/morte.arm6", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151976, "urlhaus_id": "3928906", "url": "https://179.61.221.162/bins/morte.arm7", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 151975, "urlhaus_id": "3928905", "url": "https://179.61.221.162/1.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:29 UTC", "discovered_at": "2026-10-05T06:22:29.000Z" }, { "id": 152005, "urlhaus_id": "3928904", "url": "http://107.172.132.240/bins/87sbhas6as.mips", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 152004, "urlhaus_id": "3928903", "url": "http://80.225.83.93/wife.arm7", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 152003, "urlhaus_id": "3928902", "url": "https://179.61.221.162/bins/morte.m68k", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 152002, "urlhaus_id": "3928901", "url": "http://80.225.83.93/wife.dbg", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 152001, "urlhaus_id": "3928900", "url": "https://179.61.221.162/bins/morte.sh4", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 152000, "urlhaus_id": "3928899", "url": "https://179.61.221.162/bins/morte.ppc", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 151999, "urlhaus_id": "3928898", "url": "https://179.61.221.162/b.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 151998, "urlhaus_id": "3928897", "url": "https://179.61.221.162/bins/morte.spc", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 151997, "urlhaus_id": "3928896", "url": "http://80.225.83.93/wife.spc", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 151996, "urlhaus_id": "3928895", "url": "http://107.172.132.240/bins/87sbhas6as.ppc", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 151995, "urlhaus_id": "3928894", "url": "https://179.61.221.162/bins/morte.i686", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:22:28 UTC", "discovered_at": "2026-10-05T06:22:28.000Z" }, { "id": 152007, "urlhaus_id": "3928893", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-386", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-05 06:22:25 UTC", "discovered_at": "2026-10-05T06:22:25.000Z" }, { "id": 152006, "urlhaus_id": "3928892", "url": "http://hand.genddos.st:48180/telnet", "host": "hand.genddos.st", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-05 06:22:25 UTC", "discovered_at": "2026-10-05T06:22:25.000Z" }, { "id": 152009, "urlhaus_id": "3928891", "url": "https://179.61.221.162/5.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:22 UTC", "discovered_at": "2026-10-05T06:22:22.000Z" }, { "id": 152008, "urlhaus_id": "3928890", "url": "https://179.61.221.162/2.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:22 UTC", "discovered_at": "2026-10-05T06:22:22.000Z" }, { "id": 152010, "urlhaus_id": "3928889", "url": "https://179.61.221.162/4.sh", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:20 UTC", "discovered_at": "2026-10-05T06:22:20.000Z" }, { "id": 152011, "urlhaus_id": "3928888", "url": "http://80.225.83.93/chud.arm", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:18 UTC", "discovered_at": "2026-10-05T06:22:18.000Z" }, { "id": 152013, "urlhaus_id": "3928887", "url": "http://80.225.83.93/chud.mpsl", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:17 UTC", "discovered_at": "2026-10-05T06:22:17.000Z" }, { "id": 152012, "urlhaus_id": "3928886", "url": "http://143.20.154.42/bins/wget.sh", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-05 06:22:17 UTC", "discovered_at": "2026-10-05T06:22:17.000Z" }, { "id": 152015, "urlhaus_id": "3928885", "url": "http://80.225.83.93/chud.x86_64", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:16 UTC", "discovered_at": "2026-10-05T06:22:16.000Z" }, { "id": 152014, "urlhaus_id": "3928884", "url": "http://80.225.83.93/chud.arm7", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:16 UTC", "discovered_at": "2026-10-05T06:22:16.000Z" }, { "id": 152022, "urlhaus_id": "3928883", "url": "http://80.225.83.93/chud.mips", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:15 UTC", "discovered_at": "2026-10-05T06:22:15.000Z" }, { "id": 152021, "urlhaus_id": "3928882", "url": "http://80.225.83.93/chud.x86", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:15 UTC", "discovered_at": "2026-10-05T06:22:15.000Z" }, { "id": 152020, "urlhaus_id": "3928881", "url": "http://80.225.83.93/dl.sh", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:15 UTC", "discovered_at": "2026-10-05T06:22:15.000Z" }, { "id": 152019, "urlhaus_id": "3928880", "url": "http://80.225.83.93/chud.arm6", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:15 UTC", "discovered_at": "2026-10-05T06:22:15.000Z" }, { "id": 152018, "urlhaus_id": "3928879", "url": "http://80.225.83.93/chud.arm5", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:15 UTC", "discovered_at": "2026-10-05T06:22:15.000Z" }, { "id": 152017, "urlhaus_id": "3928878", "url": "http://80.225.83.93/chud.m68k", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:15 UTC", "discovered_at": "2026-10-05T06:22:15.000Z" }, { "id": 152016, "urlhaus_id": "3928877", "url": "http://80.225.83.93/chud.ppc", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:15 UTC", "discovered_at": "2026-10-05T06:22:15.000Z" }, { "id": 152023, "urlhaus_id": "3928876", "url": "http://80.225.83.93/chud.sh4", "host": "80.225.83.93", "host_ip": "80.225.83.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:22:14 UTC", "discovered_at": "2026-10-05T06:22:14.000Z" }, { "id": 152024, "urlhaus_id": "3928875", "url": "http://42.230.54.114:59512/i", "host": "42.230.54.114", "host_ip": "42.230.54.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 06:18:17 UTC", "discovered_at": "2026-10-05T06:18:17.000Z" }, { "id": 152025, "urlhaus_id": "3928874", "url": "http://115.57.230.101:45103/bin.sh", "host": "115.57.230.101", "host_ip": "115.57.230.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 06:17:26 UTC", "discovered_at": "2026-10-05T06:17:26.000Z" }, { "id": 152026, "urlhaus_id": "3928873", "url": "http://182.117.50.118:33921/i", "host": "182.117.50.118", "host_ip": "182.117.50.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 06:17:15 UTC", "discovered_at": "2026-10-05T06:17:15.000Z" }, { "id": 152029, "urlhaus_id": "3928872", "url": "http://183.35.50.162:40190/bin.sh", "host": "183.35.50.162", "host_ip": "183.35.50.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:17:14 UTC", "discovered_at": "2026-10-05T06:17:14.000Z" }, { "id": 152028, "urlhaus_id": "3928871", "url": "http://42.56.148.18:37031/bin.sh", "host": "42.56.148.18", "host_ip": "42.56.148.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:17:14 UTC", "discovered_at": "2026-10-05T06:17:14.000Z" }, { "id": 152027, "urlhaus_id": "3928870", "url": "http://105.224.4.229:33215/i", "host": "105.224.4.229", "host_ip": "105.224.4.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:17:14 UTC", "discovered_at": "2026-10-05T06:17:14.000Z" }, { "id": 152031, "urlhaus_id": "3928869", "url": "http://176.65.139.140/bins/mpsl", "host": "176.65.139.140", "host_ip": "176.65.139.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:16:18 UTC", "discovered_at": "2026-10-05T06:16:18.000Z" }, { "id": 152030, "urlhaus_id": "3928868", "url": "http://176.65.139.140/bins/arm", "host": "176.65.139.140", "host_ip": "176.65.139.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-05 06:16:18 UTC", "discovered_at": "2026-10-05T06:16:18.000Z" }, { "id": 152032, "urlhaus_id": "3928867", "url": "http://115.49.20.207:38643/bin.sh", "host": "115.49.20.207", "host_ip": "115.49.20.207", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 06:06:22 UTC", "discovered_at": "2026-10-05T06:06:22.000Z" }, { "id": 152033, "urlhaus_id": "3928866", "url": "http://116.55.75.158:44040/i", "host": "116.55.75.158", "host_ip": "116.55.75.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 06:02:21 UTC", "discovered_at": "2026-10-05T06:02:21.000Z" }, { "id": 152034, "urlhaus_id": "3928865", "url": "http://175.165.82.123:52403/bin.sh", "host": "175.165.82.123", "host_ip": "175.165.82.123", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 06:02:17 UTC", "discovered_at": "2026-10-05T06:02:17.000Z" }, { "id": 152037, "urlhaus_id": "3928864", "url": "http://115.63.166.56:55957/i", "host": "115.63.166.56", "host_ip": "115.63.166.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:47:14 UTC", "discovered_at": "2026-10-05T05:47:14.000Z" }, { "id": 152036, "urlhaus_id": "3928863", "url": "http://58.47.66.118:44683/bin.sh", "host": "58.47.66.118", "host_ip": "58.47.66.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:47:14 UTC", "discovered_at": "2026-10-05T05:47:14.000Z" }, { "id": 152035, "urlhaus_id": "3928862", "url": "http://117.63.84.81:50448/i", "host": "117.63.84.81", "host_ip": "117.63.84.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:47:14 UTC", "discovered_at": "2026-10-05T05:47:14.000Z" }, { "id": 152040, "urlhaus_id": "3928861", "url": "http://105.224.4.229:33215/bin.sh", "host": "105.224.4.229", "host_ip": "105.224.4.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:47:13 UTC", "discovered_at": "2026-10-05T05:47:13.000Z" }, { "id": 152039, "urlhaus_id": "3928860", "url": "http://108.170.136.155:56722/i", "host": "108.170.136.155", "host_ip": "108.170.136.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 05:47:13 UTC", "discovered_at": "2026-10-05T05:47:13.000Z" }, { "id": 152038, "urlhaus_id": "3928859", "url": "http://222.142.220.49:35714/bin.sh", "host": "222.142.220.49", "host_ip": "222.142.220.49", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 05:47:13 UTC", "discovered_at": "2026-10-05T05:47:13.000Z" }, { "id": 152041, "urlhaus_id": "3928858", "url": "http://167.250.158.32:59188/i", "host": "167.250.158.32", "host_ip": "167.250.158.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 05:32:23 UTC", "discovered_at": "2026-10-05T05:32:23.000Z" }, { "id": 152042, "urlhaus_id": "3928857", "url": "http://117.63.84.81:50448/bin.sh", "host": "117.63.84.81", "host_ip": "117.63.84.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:32:15 UTC", "discovered_at": "2026-10-05T05:32:15.000Z" }, { "id": 152043, "urlhaus_id": "3928856", "url": "http://222.142.220.49:35714/i", "host": "222.142.220.49", "host_ip": "222.142.220.49", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 05:32:14 UTC", "discovered_at": "2026-10-05T05:32:14.000Z" }, { "id": 152044, "urlhaus_id": "3928855", "url": "http://120.28.199.24:50358/i", "host": "120.28.199.24", "host_ip": "120.28.199.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:32:13 UTC", "discovered_at": "2026-10-05T05:32:13.000Z" }, { "id": 152045, "urlhaus_id": "3928854", "url": "http://59.180.158.18:57700/bin.sh", "host": "59.180.158.18", "host_ip": "59.180.158.18", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 05:16:37 UTC", "discovered_at": "2026-10-05T05:16:37.000Z" }, { "id": 152046, "urlhaus_id": "3928853", "url": "http://120.84.212.119:45721/i", "host": "120.84.212.119", "host_ip": "120.84.212.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 05:16:17 UTC", "discovered_at": "2026-10-05T05:16:17.000Z" }, { "id": 152047, "urlhaus_id": "3928852", "url": "http://106.58.126.44:36106/i", "host": "106.58.126.44", "host_ip": "106.58.126.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:02:28 UTC", "discovered_at": "2026-10-05T05:02:28.000Z" }, { "id": 152049, "urlhaus_id": "3928851", "url": "http://27.44.147.229:34870/i", "host": "27.44.147.229", "host_ip": "27.44.147.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 05:02:17 UTC", "discovered_at": "2026-10-05T05:02:17.000Z" }, { "id": 152048, "urlhaus_id": "3928850", "url": "http://59.96.141.231:59746/i", "host": "59.96.141.231", "host_ip": "59.96.141.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 05:02:17 UTC", "discovered_at": "2026-10-05T05:02:17.000Z" }, { "id": 152052, "urlhaus_id": "3928849", "url": "http://123.129.154.121:57273/i", "host": "123.129.154.121", "host_ip": "123.129.154.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 05:02:16 UTC", "discovered_at": "2026-10-05T05:02:16.000Z" }, { "id": 152051, "urlhaus_id": "3928848", "url": "http://222.137.250.123:48113/i", "host": "222.137.250.123", "host_ip": "222.137.250.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:02:16 UTC", "discovered_at": "2026-10-05T05:02:16.000Z" }, { "id": 152050, "urlhaus_id": "3928847", "url": "http://120.28.199.24:50358/bin.sh", "host": "120.28.199.24", "host_ip": "120.28.199.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 05:02:16 UTC", "discovered_at": "2026-10-05T05:02:16.000Z" }, { "id": 152053, "urlhaus_id": "3928846", "url": "http://182.240.11.33:47625/bin.sh", "host": "182.240.11.33", "host_ip": "182.240.11.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 04:47:33 UTC", "discovered_at": "2026-10-05T04:47:33.000Z" }, { "id": 152055, "urlhaus_id": "3928845", "url": "http://27.37.230.113:38849/i", "host": "27.37.230.113", "host_ip": "27.37.230.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 04:47:14 UTC", "discovered_at": "2026-10-05T04:47:14.000Z" }, { "id": 152054, "urlhaus_id": "3928844", "url": "http://27.215.123.59:54044/i", "host": "27.215.123.59", "host_ip": "27.215.123.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 04:47:14 UTC", "discovered_at": "2026-10-05T04:47:14.000Z" }, { "id": 152056, "urlhaus_id": "3928843", "url": "http://219.157.253.88:45074/i", "host": "219.157.253.88", "host_ip": "219.157.253.88", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 04:46:30 UTC", "discovered_at": "2026-10-05T04:46:30.000Z" }, { "id": 152057, "urlhaus_id": "3928842", "url": "http://123.129.154.121:57273/bin.sh", "host": "123.129.154.121", "host_ip": "123.129.154.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 04:32:16 UTC", "discovered_at": "2026-10-05T04:32:16.000Z" }, { "id": 152059, "urlhaus_id": "3928841", "url": "http://27.207.228.107:48178/i", "host": "27.207.228.107", "host_ip": "27.207.228.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 04:32:13 UTC", "discovered_at": "2026-10-05T04:32:13.000Z" }, { "id": 152058, "urlhaus_id": "3928840", "url": "http://120.84.215.173:52695/bin.sh", "host": "120.84.215.173", "host_ip": "120.84.215.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 04:32:13 UTC", "discovered_at": "2026-10-05T04:32:13.000Z" }, { "id": 152060, "urlhaus_id": "3928839", "url": "http://113.237.104.148:53693/bin.sh", "host": "113.237.104.148", "host_ip": "113.237.104.148", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 04:31:26 UTC", "discovered_at": "2026-10-05T04:31:26.000Z" }, { "id": 152061, "urlhaus_id": "3928838", "url": "http://120.28.200.193:46654/i", "host": "120.28.200.193", "host_ip": "120.28.200.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 04:17:13 UTC", "discovered_at": "2026-10-05T04:17:13.000Z" }, { "id": 152064, "urlhaus_id": "3928837", "url": "http://42.6.250.18:51339/i", "host": "42.6.250.18", "host_ip": "42.6.250.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 04:17:12 UTC", "discovered_at": "2026-10-05T04:17:12.000Z" }, { "id": 152063, "urlhaus_id": "3928836", "url": "http://42.232.238.234:42099/i", "host": "42.232.238.234", "host_ip": "42.232.238.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 04:17:12 UTC", "discovered_at": "2026-10-05T04:17:12.000Z" }, { "id": 152062, "urlhaus_id": "3928835", "url": "http://59.103.116.83:49847/i", "host": "59.103.116.83", "host_ip": "59.103.116.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 04:17:12 UTC", "discovered_at": "2026-10-05T04:17:12.000Z" }, { "id": 152065, "urlhaus_id": "3928834", "url": "http://92.42.134.80:44309/i", "host": "92.42.134.80", "host_ip": "92.42.134.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 04:02:16 UTC", "discovered_at": "2026-10-05T04:02:16.000Z" }, { "id": 152068, "urlhaus_id": "3928833", "url": "http://42.232.238.234:42099/bin.sh", "host": "42.232.238.234", "host_ip": "42.232.238.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 04:02:12 UTC", "discovered_at": "2026-10-05T04:02:12.000Z" }, { "id": 152067, "urlhaus_id": "3928832", "url": "http://27.207.228.107:48178/bin.sh", "host": "27.207.228.107", "host_ip": "27.207.228.107", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 04:02:12 UTC", "discovered_at": "2026-10-05T04:02:12.000Z" }, { "id": 152066, "urlhaus_id": "3928831", "url": "http://171.104.126.116:51926/i", "host": "171.104.126.116", "host_ip": "171.104.126.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 04:02:12 UTC", "discovered_at": "2026-10-05T04:02:12.000Z" }, { "id": 152069, "urlhaus_id": "3928830", "url": "http://182.113.204.37:54180/bin.sh", "host": "182.113.204.37", "host_ip": "182.113.204.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 04:02:11 UTC", "discovered_at": "2026-10-05T04:02:11.000Z" }, { "id": 152070, "urlhaus_id": "3928829", "url": "http://222.127.73.15:55066/i", "host": "222.127.73.15", "host_ip": "222.127.73.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 03:48:13 UTC", "discovered_at": "2026-10-05T03:48:13.000Z" }, { "id": 152071, "urlhaus_id": "3928828", "url": "http://185.214.17.203:34053/i", "host": "185.214.17.203", "host_ip": "185.214.17.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 03:47:15 UTC", "discovered_at": "2026-10-05T03:47:15.000Z" }, { "id": 152072, "urlhaus_id": "3928827", "url": "http://42.6.250.18:51339/bin.sh", "host": "42.6.250.18", "host_ip": "42.6.250.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 03:47:14 UTC", "discovered_at": "2026-10-05T03:47:14.000Z" }, { "id": 152073, "urlhaus_id": "3928826", "url": "http://42.232.88.230:54336/bin.sh", "host": "42.232.88.230", "host_ip": "42.232.88.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 03:42:27 UTC", "discovered_at": "2026-10-05T03:42:27.000Z" }, { "id": 152074, "urlhaus_id": "3928825", "url": "http://123.12.241.56:49065/i", "host": "123.12.241.56", "host_ip": "123.12.241.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 03:33:13 UTC", "discovered_at": "2026-10-05T03:33:13.000Z" }, { "id": 152075, "urlhaus_id": "3928824", "url": "http://92.42.134.80:44309/bin.sh", "host": "92.42.134.80", "host_ip": "92.42.134.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 03:32:17 UTC", "discovered_at": "2026-10-05T03:32:17.000Z" }, { "id": 152076, "urlhaus_id": "3928823", "url": "http://45.249.84.27:37225/bin.sh", "host": "45.249.84.27", "host_ip": "45.249.84.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 03:32:16 UTC", "discovered_at": "2026-10-05T03:32:16.000Z" }, { "id": 152078, "urlhaus_id": "3928822", "url": "http://125.43.227.97:55387/i", "host": "125.43.227.97", "host_ip": "125.43.227.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 03:32:14 UTC", "discovered_at": "2026-10-05T03:32:14.000Z" }, { "id": 152077, "urlhaus_id": "3928821", "url": "http://112.239.103.3:32832/bin.sh", "host": "112.239.103.3", "host_ip": "112.239.103.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 03:32:14 UTC", "discovered_at": "2026-10-05T03:32:14.000Z" }, { "id": 152079, "urlhaus_id": "3928820", "url": "http://222.127.73.15:55066/bin.sh", "host": "222.127.73.15", "host_ip": "222.127.73.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 03:17:15 UTC", "discovered_at": "2026-10-05T03:17:15.000Z" }, { "id": 152080, "urlhaus_id": "3928819", "url": "http://120.84.212.206:35060/i", "host": "120.84.212.206", "host_ip": "120.84.212.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 03:17:12 UTC", "discovered_at": "2026-10-05T03:17:12.000Z" }, { "id": 152082, "urlhaus_id": "3928818", "url": "http://103.111.23.12:36304/i", "host": "103.111.23.12", "host_ip": "103.111.23.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 03:17:11 UTC", "discovered_at": "2026-10-05T03:17:11.000Z" }, { "id": 152081, "urlhaus_id": "3928817", "url": "http://36.89.252.178:33229/i", "host": "36.89.252.178", "host_ip": "36.89.252.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 03:17:11 UTC", "discovered_at": "2026-10-05T03:17:11.000Z" }, { "id": 152084, "urlhaus_id": "3928816", "url": "http://125.43.227.97:55387/bin.sh", "host": "125.43.227.97", "host_ip": "125.43.227.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 03:02:14 UTC", "discovered_at": "2026-10-05T03:02:14.000Z" }, { "id": 152083, "urlhaus_id": "3928815", "url": "http://105.187.32.246:34923/i", "host": "105.187.32.246", "host_ip": "105.187.32.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 03:02:14 UTC", "discovered_at": "2026-10-05T03:02:14.000Z" }, { "id": 152085, "urlhaus_id": "3928814", "url": "http://222.142.245.17:45606/i", "host": "222.142.245.17", "host_ip": "222.142.245.17", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 03:02:13 UTC", "discovered_at": "2026-10-05T03:02:13.000Z" }, { "id": 152086, "urlhaus_id": "3928813", "url": "http://105.226.7.80:56355/i", "host": "105.226.7.80", "host_ip": "105.226.7.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 02:49:26 UTC", "discovered_at": "2026-10-05T02:49:26.000Z" }, { "id": 152087, "urlhaus_id": "3928812", "url": "http://119.102.60.79:43236/i", "host": "119.102.60.79", "host_ip": "119.102.60.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 02:47:18 UTC", "discovered_at": "2026-10-05T02:47:18.000Z" }, { "id": 152088, "urlhaus_id": "3928811", "url": "http://180.115.65.152:44326/i", "host": "180.115.65.152", "host_ip": "180.115.65.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 02:32:13 UTC", "discovered_at": "2026-10-05T02:32:13.000Z" }, { "id": 152090, "urlhaus_id": "3928810", "url": "http://120.28.219.231:35445/i", "host": "120.28.219.231", "host_ip": "120.28.219.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 02:32:12 UTC", "discovered_at": "2026-10-05T02:32:12.000Z" }, { "id": 152089, "urlhaus_id": "3928809", "url": "http://61.52.89.191:41661/i", "host": "61.52.89.191", "host_ip": "61.52.89.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 02:32:12 UTC", "discovered_at": "2026-10-05T02:32:12.000Z" }, { "id": 152091, "urlhaus_id": "3928808", "url": "http://105.226.7.80:56355/bin.sh", "host": "105.226.7.80", "host_ip": "105.226.7.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 02:18:23 UTC", "discovered_at": "2026-10-05T02:18:23.000Z" }, { "id": 152092, "urlhaus_id": "3928807", "url": "http://112.225.105.182:38520/i", "host": "112.225.105.182", "host_ip": "112.225.105.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 02:17:31 UTC", "discovered_at": "2026-10-05T02:17:31.000Z" }, { "id": 152095, "urlhaus_id": "3928806", "url": "http://61.53.205.39:35047/i", "host": "61.53.205.39", "host_ip": "61.53.205.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 02:17:13 UTC", "discovered_at": "2026-10-05T02:17:13.000Z" }, { "id": 152094, "urlhaus_id": "3928805", "url": "http://175.147.231.120:48371/i", "host": "175.147.231.120", "host_ip": "175.147.231.120", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 02:17:13 UTC", "discovered_at": "2026-10-05T02:17:13.000Z" }, { "id": 152093, "urlhaus_id": "3928804", "url": "http://120.84.212.89:44234/bin.sh", "host": "120.84.212.89", "host_ip": "120.84.212.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 02:17:13 UTC", "discovered_at": "2026-10-05T02:17:13.000Z" }, { "id": 152098, "urlhaus_id": "3928803", "url": "http://120.28.219.231:35445/bin.sh", "host": "120.28.219.231", "host_ip": "120.28.219.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 02:02:13 UTC", "discovered_at": "2026-10-05T02:02:13.000Z" }, { "id": 152097, "urlhaus_id": "3928802", "url": "http://182.114.194.94:45506/bin.sh", "host": "182.114.194.94", "host_ip": "182.114.194.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 02:02:13 UTC", "discovered_at": "2026-10-05T02:02:13.000Z" }, { "id": 152096, "urlhaus_id": "3928801", "url": "http://180.244.15.54:39118/bin.sh", "host": "180.244.15.54", "host_ip": "180.244.15.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 02:02:13 UTC", "discovered_at": "2026-10-05T02:02:13.000Z" }, { "id": 152099, "urlhaus_id": "3928800", "url": "http://105.184.91.81:58725/i", "host": "105.184.91.81", "host_ip": "105.184.91.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 01:55:19 UTC", "discovered_at": "2026-10-05T01:55:19.000Z" }, { "id": 152100, "urlhaus_id": "3928799", "url": "http://115.58.93.72:42874/bin.sh", "host": "115.58.93.72", "host_ip": "115.58.93.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 01:54:22 UTC", "discovered_at": "2026-10-05T01:54:22.000Z" }, { "id": 152101, "urlhaus_id": "3928798", "url": "http://105.184.91.81:58725/bin.sh", "host": "105.184.91.81", "host_ip": "105.184.91.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 01:52:26 UTC", "discovered_at": "2026-10-05T01:52:26.000Z" }, { "id": 152102, "urlhaus_id": "3928797", "url": "http://42.6.79.147:59355/i", "host": "42.6.79.147", "host_ip": "42.6.79.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:46:26 UTC", "discovered_at": "2026-10-05T01:46:26.000Z" }, { "id": 152103, "urlhaus_id": "3928796", "url": "http://196.206.50.169:45158/i", "host": "196.206.50.169", "host_ip": "196.206.50.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 01:46:15 UTC", "discovered_at": "2026-10-05T01:46:15.000Z" }, { "id": 152107, "urlhaus_id": "3928795", "url": "http://162.35.243.63/backup/winki.arm6", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:46:14 UTC", "discovered_at": "2026-10-05T01:46:14.000Z" }, { "id": 152106, "urlhaus_id": "3928794", "url": "http://162.35.243.63/backup/winki.mips", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:46:14 UTC", "discovered_at": "2026-10-05T01:46:14.000Z" }, { "id": 152105, "urlhaus_id": "3928793", "url": "http://180.244.15.54:39118/i", "host": "180.244.15.54", "host_ip": "180.244.15.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:46:14 UTC", "discovered_at": "2026-10-05T01:46:14.000Z" }, { "id": 152104, "urlhaus_id": "3928792", "url": "http://61.53.105.243:42311/i", "host": "61.53.105.243", "host_ip": "61.53.105.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 01:46:14 UTC", "discovered_at": "2026-10-05T01:46:14.000Z" }, { "id": 152108, "urlhaus_id": "3928791", "url": "http://125.41.2.124:60421/bin.sh", "host": "125.41.2.124", "host_ip": "125.41.2.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:46:13 UTC", "discovered_at": "2026-10-05T01:46:13.000Z" }, { "id": 152109, "urlhaus_id": "3928790", "url": "http://162.35.243.63/backup/winki.ppc", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:45:23 UTC", "discovered_at": "2026-10-05T01:45:23.000Z" }, { "id": 152116, "urlhaus_id": "3928789", "url": "http://162.35.243.63/backup/winki.sh4", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:44:16 UTC", "discovered_at": "2026-10-05T01:44:16.000Z" }, { "id": 152115, "urlhaus_id": "3928788", "url": "http://162.35.243.63/backup/winki.arm7", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:44:16 UTC", "discovered_at": "2026-10-05T01:44:16.000Z" }, { "id": 152114, "urlhaus_id": "3928787", "url": "http://162.35.243.63/backup/winki.arm5", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:44:16 UTC", "discovered_at": "2026-10-05T01:44:16.000Z" }, { "id": 152113, "urlhaus_id": "3928786", "url": "http://162.35.243.63/backup/winki.mpsl", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:44:16 UTC", "discovered_at": "2026-10-05T01:44:16.000Z" }, { "id": 152112, "urlhaus_id": "3928785", "url": "http://162.35.243.63/backup/winki.m68k", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:44:16 UTC", "discovered_at": "2026-10-05T01:44:16.000Z" }, { "id": 152111, "urlhaus_id": "3928784", "url": "http://162.35.243.63/backup/winki.arm", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:44:16 UTC", "discovered_at": "2026-10-05T01:44:16.000Z" }, { "id": 152110, "urlhaus_id": "3928783", "url": "http://162.35.243.63/backup/winki.x86", "host": "162.35.243.63", "host_ip": "162.35.243.63", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-05 01:44:16 UTC", "discovered_at": "2026-10-05T01:44:16.000Z" }, { "id": 152117, "urlhaus_id": "3928782", "url": "http://219.157.3.237:45422/i", "host": "219.157.3.237", "host_ip": "219.157.3.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 01:33:19 UTC", "discovered_at": "2026-10-05T01:33:19.000Z" }, { "id": 152119, "urlhaus_id": "3928781", "url": "http://182.112.240.21:34953/i", "host": "182.112.240.21", "host_ip": "182.112.240.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:32:25 UTC", "discovered_at": "2026-10-05T01:32:25.000Z" }, { "id": 152118, "urlhaus_id": "3928780", "url": "http://59.97.250.28:53821/bin.sh", "host": "59.97.250.28", "host_ip": "59.97.250.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 01:32:25 UTC", "discovered_at": "2026-10-05T01:32:25.000Z" }, { "id": 152120, "urlhaus_id": "3928779", "url": "http://101.108.0.157:36813/i", "host": "101.108.0.157", "host_ip": "101.108.0.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:32:24 UTC", "discovered_at": "2026-10-05T01:32:24.000Z" }, { "id": 152124, "urlhaus_id": "3928778", "url": "http://60.13.84.124:42261/i", "host": "60.13.84.124", "host_ip": "60.13.84.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:32:23 UTC", "discovered_at": "2026-10-05T01:32:23.000Z" }, { "id": 152123, "urlhaus_id": "3928777", "url": "http://60.177.1.123:36365/i", "host": "60.177.1.123", "host_ip": "60.177.1.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:32:23 UTC", "discovered_at": "2026-10-05T01:32:23.000Z" }, { "id": 152122, "urlhaus_id": "3928776", "url": "http://220.201.18.96:45223/i", "host": "220.201.18.96", "host_ip": "220.201.18.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:32:23 UTC", "discovered_at": "2026-10-05T01:32:23.000Z" }, { "id": 152121, "urlhaus_id": "3928775", "url": "http://175.165.81.177:52365/bin.sh", "host": "175.165.81.177", "host_ip": "175.165.81.177", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:32:23 UTC", "discovered_at": "2026-10-05T01:32:23.000Z" }, { "id": 152125, "urlhaus_id": "3928774", "url": "http://180.115.161.198:55704/i", "host": "180.115.161.198", "host_ip": "180.115.161.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:31:18 UTC", "discovered_at": "2026-10-05T01:31:18.000Z" }, { "id": 152126, "urlhaus_id": "3928773", "url": "http://164.163.26.124:58478/i", "host": "164.163.26.124", "host_ip": "164.163.26.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "arm, cowrie, elf, honeypot, mirai", "last_online": null, "first_seen": "2026-10-05 01:30:25 UTC", "discovered_at": "2026-10-05T01:30:25.000Z" }, { "id": 152127, "urlhaus_id": "3928772", "url": "http://180.109.190.25:43441/i", "host": "180.109.190.25", "host_ip": "180.109.190.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 01:29:10 UTC", "discovered_at": "2026-10-05T01:29:10.000Z" }, { "id": 152128, "urlhaus_id": "3928771", "url": "http://112.198.238.30:51840/i", "host": "112.198.238.30", "host_ip": "112.198.238.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:17:15 UTC", "discovered_at": "2026-10-05T01:17:15.000Z" }, { "id": 152130, "urlhaus_id": "3928770", "url": "http://210.208.111.220:41064/i", "host": "210.208.111.220", "host_ip": "210.208.111.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:17:12 UTC", "discovered_at": "2026-10-05T01:17:12.000Z" }, { "id": 152129, "urlhaus_id": "3928769", "url": "http://27.215.89.229:55829/bin.sh", "host": "27.215.89.229", "host_ip": "27.215.89.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 01:17:12 UTC", "discovered_at": "2026-10-05T01:17:12.000Z" }, { "id": 152131, "urlhaus_id": "3928768", "url": "http://42.6.79.147:59355/bin.sh", "host": "42.6.79.147", "host_ip": "42.6.79.147", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:17:11 UTC", "discovered_at": "2026-10-05T01:17:11.000Z" }, { "id": 152132, "urlhaus_id": "3928767", "url": "http://175.165.87.240:33068/i", "host": "175.165.87.240", "host_ip": "175.165.87.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 01:15:16 UTC", "discovered_at": "2026-10-05T01:15:16.000Z" }, { "id": 152133, "urlhaus_id": "3928766", "url": "http://220.201.18.96:45223/bin.sh", "host": "220.201.18.96", "host_ip": "220.201.18.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:02:26 UTC", "discovered_at": "2026-10-05T01:02:26.000Z" }, { "id": 152134, "urlhaus_id": "3928765", "url": "http://180.109.190.25:43441/bin.sh", "host": "180.109.190.25", "host_ip": "180.109.190.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-05 01:02:25 UTC", "discovered_at": "2026-10-05T01:02:25.000Z" }, { "id": 152136, "urlhaus_id": "3928764", "url": "http://120.84.215.173:52695/i", "host": "120.84.215.173", "host_ip": "120.84.215.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:02:15 UTC", "discovered_at": "2026-10-05T01:02:15.000Z" }, { "id": 152135, "urlhaus_id": "3928763", "url": "http://182.112.240.21:34953/bin.sh", "host": "182.112.240.21", "host_ip": "182.112.240.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:02:15 UTC", "discovered_at": "2026-10-05T01:02:15.000Z" }, { "id": 152137, "urlhaus_id": "3928762", "url": "http://60.177.1.123:36365/bin.sh", "host": "60.177.1.123", "host_ip": "60.177.1.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:02:14 UTC", "discovered_at": "2026-10-05T01:02:14.000Z" }, { "id": 152138, "urlhaus_id": "3928761", "url": "http://42.59.237.14:57635/i", "host": "42.59.237.14", "host_ip": "42.59.237.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 01:02:13 UTC", "discovered_at": "2026-10-05T01:02:13.000Z" }, { "id": 152140, "urlhaus_id": "3928760", "url": "http://103.172.186.194:48172/i", "host": "103.172.186.194", "host_ip": "103.172.186.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:02:12 UTC", "discovered_at": "2026-10-05T01:02:12.000Z" }, { "id": 152139, "urlhaus_id": "3928759", "url": "http://46.252.33.253:34390/i", "host": "46.252.33.253", "host_ip": "46.252.33.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:02:12 UTC", "discovered_at": "2026-10-05T01:02:12.000Z" }, { "id": 152141, "urlhaus_id": "3928758", "url": "http://117.63.189.130:34671/i", "host": "117.63.189.130", "host_ip": "117.63.189.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 01:01:13 UTC", "discovered_at": "2026-10-05T01:01:13.000Z" }, { "id": 152144, "urlhaus_id": "3928757", "url": "http://182.114.194.94:45506/i", "host": "182.114.194.94", "host_ip": "182.114.194.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 00:47:15 UTC", "discovered_at": "2026-10-05T00:47:15.000Z" }, { "id": 152143, "urlhaus_id": "3928756", "url": "http://210.208.111.220:41064/bin.sh", "host": "210.208.111.220", "host_ip": "210.208.111.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 00:47:15 UTC", "discovered_at": "2026-10-05T00:47:15.000Z" }, { "id": 152142, "urlhaus_id": "3928755", "url": "http://42.52.142.115:57683/bin.sh", "host": "42.52.142.115", "host_ip": "42.52.142.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 00:47:15 UTC", "discovered_at": "2026-10-05T00:47:15.000Z" }, { "id": 152145, "urlhaus_id": "3928754", "url": "http://196.189.69.192:44839/i", "host": "196.189.69.192", "host_ip": "196.189.69.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 00:33:16 UTC", "discovered_at": "2026-10-05T00:33:16.000Z" }, { "id": 152148, "urlhaus_id": "3928753", "url": "http://219.156.112.194:48834/bin.sh", "host": "219.156.112.194", "host_ip": "219.156.112.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 00:32:19 UTC", "discovered_at": "2026-10-05T00:32:19.000Z" }, { "id": 152147, "urlhaus_id": "3928752", "url": "http://219.156.112.194:48834/i", "host": "219.156.112.194", "host_ip": "219.156.112.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 00:32:19 UTC", "discovered_at": "2026-10-05T00:32:19.000Z" }, { "id": 152146, "urlhaus_id": "3928751", "url": "http://42.52.142.115:57683/i", "host": "42.52.142.115", "host_ip": "42.52.142.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 00:32:19 UTC", "discovered_at": "2026-10-05T00:32:19.000Z" }, { "id": 152152, "urlhaus_id": "3928750", "url": "http://125.41.73.51:35908/bin.sh", "host": "125.41.73.51", "host_ip": "125.41.73.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 00:32:18 UTC", "discovered_at": "2026-10-05T00:32:18.000Z" }, { "id": 152151, "urlhaus_id": "3928749", "url": "http://61.52.159.237:58508/bin.sh", "host": "61.52.159.237", "host_ip": "61.52.159.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 00:32:18 UTC", "discovered_at": "2026-10-05T00:32:18.000Z" }, { "id": 152150, "urlhaus_id": "3928748", "url": "http://101.51.52.106:56461/bin.sh", "host": "101.51.52.106", "host_ip": "101.51.52.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 00:32:18 UTC", "discovered_at": "2026-10-05T00:32:18.000Z" }, { "id": 152149, "urlhaus_id": "3928747", "url": "http://42.85.218.119:46445/bin.sh", "host": "42.85.218.119", "host_ip": "42.85.218.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 00:32:18 UTC", "discovered_at": "2026-10-05T00:32:18.000Z" }, { "id": 152153, "urlhaus_id": "3928746", "url": "http://117.63.189.130:34671/bin.sh", "host": "117.63.189.130", "host_ip": "117.63.189.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 00:31:19 UTC", "discovered_at": "2026-10-05T00:31:19.000Z" }, { "id": 152154, "urlhaus_id": "3928745", "url": "http://59.180.146.15:40178/i", "host": "59.180.146.15", "host_ip": "59.180.146.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 00:17:26 UTC", "discovered_at": "2026-10-05T00:17:26.000Z" }, { "id": 152155, "urlhaus_id": "3928744", "url": "http://170.238.123.134:54657/i", "host": "170.238.123.134", "host_ip": "170.238.123.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 00:17:14 UTC", "discovered_at": "2026-10-05T00:17:14.000Z" }, { "id": 152156, "urlhaus_id": "3928743", "url": "http://182.119.218.104:59628/bin.sh", "host": "182.119.218.104", "host_ip": "182.119.218.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 00:16:19 UTC", "discovered_at": "2026-10-05T00:16:19.000Z" }, { "id": 152157, "urlhaus_id": "3928742", "url": "http://59.180.149.7:55956/i", "host": "59.180.149.7", "host_ip": "59.180.149.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-05 00:08:35 UTC", "discovered_at": "2026-10-05T00:08:35.000Z" }, { "id": 152158, "urlhaus_id": "3928741", "url": "http://14.145.162.180:39099/i", "host": "14.145.162.180", "host_ip": "14.145.162.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-05 00:02:26 UTC", "discovered_at": "2026-10-05T00:02:26.000Z" }, { "id": 152161, "urlhaus_id": "3928740", "url": "http://112.195.117.249:45477/i", "host": "112.195.117.249", "host_ip": "112.195.117.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 00:02:12 UTC", "discovered_at": "2026-10-05T00:02:12.000Z" }, { "id": 152160, "urlhaus_id": "3928739", "url": "http://196.189.69.192:44839/bin.sh", "host": "196.189.69.192", "host_ip": "196.189.69.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-05 00:02:12 UTC", "discovered_at": "2026-10-05T00:02:12.000Z" }, { "id": 152159, "urlhaus_id": "3928738", "url": "http://115.63.8.6:42824/bin.sh", "host": "115.63.8.6", "host_ip": "115.63.8.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 00:02:12 UTC", "discovered_at": "2026-10-05T00:02:12.000Z" }, { "id": 152162, "urlhaus_id": "3928737", "url": "http://123.4.49.203:40713/bin.sh", "host": "123.4.49.203", "host_ip": "123.4.49.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-05 00:01:13 UTC", "discovered_at": "2026-10-05T00:01:13.000Z" }, { "id": 152165, "urlhaus_id": "3928736", "url": "http://181.174.231.21:43610/i", "host": "181.174.231.21", "host_ip": "181.174.231.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:47:12 UTC", "discovered_at": "2026-10-04T23:47:12.000Z" }, { "id": 152164, "urlhaus_id": "3928735", "url": "http://170.238.123.134:54657/bin.sh", "host": "170.238.123.134", "host_ip": "170.238.123.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:47:12 UTC", "discovered_at": "2026-10-04T23:47:12.000Z" }, { "id": 152163, "urlhaus_id": "3928734", "url": "http://196.189.197.131:54397/i", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:47:12 UTC", "discovered_at": "2026-10-04T23:47:12.000Z" }, { "id": 152166, "urlhaus_id": "3928733", "url": "http://123.129.0.89:33171/bin.sh", "host": "123.129.0.89", "host_ip": "123.129.0.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:32:16 UTC", "discovered_at": "2026-10-04T23:32:16.000Z" }, { "id": 152168, "urlhaus_id": "3928732", "url": "http://123.129.0.89:33171/i", "host": "123.129.0.89", "host_ip": "123.129.0.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:32:15 UTC", "discovered_at": "2026-10-04T23:32:15.000Z" }, { "id": 152167, "urlhaus_id": "3928731", "url": "http://112.195.117.249:45477/bin.sh", "host": "112.195.117.249", "host_ip": "112.195.117.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:32:15 UTC", "discovered_at": "2026-10-04T23:32:15.000Z" }, { "id": 152172, "urlhaus_id": "3928730", "url": "http://119.178.218.102:42472/bin.sh", "host": "119.178.218.102", "host_ip": "119.178.218.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:32:14 UTC", "discovered_at": "2026-10-04T23:32:14.000Z" }, { "id": 152171, "urlhaus_id": "3928729", "url": "http://42.224.176.3:51347/i", "host": "42.224.176.3", "host_ip": "42.224.176.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:32:14 UTC", "discovered_at": "2026-10-04T23:32:14.000Z" }, { "id": 152170, "urlhaus_id": "3928728", "url": "http://61.168.141.86:47638/bin.sh", "host": "61.168.141.86", "host_ip": "61.168.141.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:32:14 UTC", "discovered_at": "2026-10-04T23:32:14.000Z" }, { "id": 152169, "urlhaus_id": "3928727", "url": "http://219.157.34.76:60173/bin.sh", "host": "219.157.34.76", "host_ip": "219.157.34.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:32:14 UTC", "discovered_at": "2026-10-04T23:32:14.000Z" }, { "id": 152173, "urlhaus_id": "3928726", "url": "http://45.249.84.27:37225/i", "host": "45.249.84.27", "host_ip": "45.249.84.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 23:17:18 UTC", "discovered_at": "2026-10-04T23:17:18.000Z" }, { "id": 152175, "urlhaus_id": "3928725", "url": "http://14.221.239.228:59076/i", "host": "14.221.239.228", "host_ip": "14.221.239.228", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:17:11 UTC", "discovered_at": "2026-10-04T23:17:11.000Z" }, { "id": 152174, "urlhaus_id": "3928724", "url": "http://180.191.32.197:43434/bin.sh", "host": "180.191.32.197", "host_ip": "180.191.32.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:17:11 UTC", "discovered_at": "2026-10-04T23:17:11.000Z" }, { "id": 152177, "urlhaus_id": "3928723", "url": "http://125.44.18.119:34090/bin.sh", "host": "125.44.18.119", "host_ip": "125.44.18.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:17:10 UTC", "discovered_at": "2026-10-04T23:17:10.000Z" }, { "id": 152176, "urlhaus_id": "3928722", "url": "http://185.9.139.117:56174/i", "host": "185.9.139.117", "host_ip": "185.9.139.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:17:10 UTC", "discovered_at": "2026-10-04T23:17:10.000Z" }, { "id": 152178, "urlhaus_id": "3928721", "url": "http://123.189.208.157:42440/i", "host": "123.189.208.157", "host_ip": "123.189.208.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 23:08:21 UTC", "discovered_at": "2026-10-04T23:08:21.000Z" }, { "id": 152182, "urlhaus_id": "3928720", "url": "http://42.224.176.3:51347/bin.sh", "host": "42.224.176.3", "host_ip": "42.224.176.3", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:02:13 UTC", "discovered_at": "2026-10-04T23:02:13.000Z" }, { "id": 152181, "urlhaus_id": "3928719", "url": "http://210.208.111.100:39052/i", "host": "210.208.111.100", "host_ip": "210.208.111.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 23:02:13 UTC", "discovered_at": "2026-10-04T23:02:13.000Z" }, { "id": 152180, "urlhaus_id": "3928718", "url": "http://112.239.102.153:56602/i", "host": "112.239.102.153", "host_ip": "112.239.102.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:02:13 UTC", "discovered_at": "2026-10-04T23:02:13.000Z" }, { "id": 152179, "urlhaus_id": "3928717", "url": "http://61.52.36.98:52546/i", "host": "61.52.36.98", "host_ip": "61.52.36.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 23:02:13 UTC", "discovered_at": "2026-10-04T23:02:13.000Z" }, { "id": 152183, "urlhaus_id": "3928716", "url": "http://27.215.124.85:40583/bin.sh", "host": "27.215.124.85", "host_ip": "27.215.124.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 22:50:23 UTC", "discovered_at": "2026-10-04T22:50:23.000Z" }, { "id": 152184, "urlhaus_id": "3928715", "url": "http://210.208.111.36:45746/i", "host": "210.208.111.36", "host_ip": "210.208.111.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 22:47:11 UTC", "discovered_at": "2026-10-04T22:47:11.000Z" }, { "id": 152186, "urlhaus_id": "3928714", "url": "http://175.165.82.127:40349/i", "host": "175.165.82.127", "host_ip": "175.165.82.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:47:10 UTC", "discovered_at": "2026-10-04T22:47:10.000Z" }, { "id": 152185, "urlhaus_id": "3928713", "url": "http://115.57.230.101:45103/i", "host": "115.57.230.101", "host_ip": "115.57.230.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 22:47:10 UTC", "discovered_at": "2026-10-04T22:47:10.000Z" }, { "id": 152188, "urlhaus_id": "3928712", "url": "http://185.9.139.117:56174/bin.sh", "host": "185.9.139.117", "host_ip": "185.9.139.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 22:47:09 UTC", "discovered_at": "2026-10-04T22:47:09.000Z" }, { "id": 152187, "urlhaus_id": "3928711", "url": "http://195.64.243.84:46567/i", "host": "195.64.243.84", "host_ip": "195.64.243.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 22:47:09 UTC", "discovered_at": "2026-10-04T22:47:09.000Z" }, { "id": 152189, "urlhaus_id": "3928710", "url": "http://112.239.102.153:56602/bin.sh", "host": "112.239.102.153", "host_ip": "112.239.102.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 22:32:33 UTC", "discovered_at": "2026-10-04T22:32:33.000Z" }, { "id": 152190, "urlhaus_id": "3928709", "url": "http://101.108.103.170:55932/bin.sh", "host": "101.108.103.170", "host_ip": "101.108.103.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 22:32:15 UTC", "discovered_at": "2026-10-04T22:32:15.000Z" }, { "id": 152192, "urlhaus_id": "3928708", "url": "http://117.63.140.246:35202/i", "host": "117.63.140.246", "host_ip": "117.63.140.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 22:32:14 UTC", "discovered_at": "2026-10-04T22:32:14.000Z" }, { "id": 152191, "urlhaus_id": "3928707", "url": "http://61.52.36.98:52546/bin.sh", "host": "61.52.36.98", "host_ip": "61.52.36.98", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 22:32:14 UTC", "discovered_at": "2026-10-04T22:32:14.000Z" }, { "id": 152198, "urlhaus_id": "3928706", "url": "http://115.50.177.89:59352/i", "host": "115.50.177.89", "host_ip": "115.50.177.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 22:32:13 UTC", "discovered_at": "2026-10-04T22:32:13.000Z" }, { "id": 152197, "urlhaus_id": "3928705", "url": "http://195.64.243.84:46567/bin.sh", "host": "195.64.243.84", "host_ip": "195.64.243.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 22:32:13 UTC", "discovered_at": "2026-10-04T22:32:13.000Z" }, { "id": 152196, "urlhaus_id": "3928704", "url": "http://175.149.69.12:36126/i", "host": "175.149.69.12", "host_ip": "175.149.69.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:32:13 UTC", "discovered_at": "2026-10-04T22:32:13.000Z" }, { "id": 152195, "urlhaus_id": "3928703", "url": "http://42.227.128.111:47712/bin.sh", "host": "42.227.128.111", "host_ip": "42.227.128.111", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:32:13 UTC", "discovered_at": "2026-10-04T22:32:13.000Z" }, { "id": 152194, "urlhaus_id": "3928702", "url": "http://119.114.58.206:37192/i", "host": "119.114.58.206", "host_ip": "119.114.58.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:32:13 UTC", "discovered_at": "2026-10-04T22:32:13.000Z" }, { "id": 152193, "urlhaus_id": "3928701", "url": "http://182.116.121.105:35375/bin.sh", "host": "182.116.121.105", "host_ip": "182.116.121.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:32:13 UTC", "discovered_at": "2026-10-04T22:32:13.000Z" }, { "id": 152199, "urlhaus_id": "3928700", "url": "http://42.86.171.184:38220/bin.sh", "host": "42.86.171.184", "host_ip": "42.86.171.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 22:30:30 UTC", "discovered_at": "2026-10-04T22:30:30.000Z" }, { "id": 152200, "urlhaus_id": "3928699", "url": "http://175.165.81.177:52365/i", "host": "175.165.81.177", "host_ip": "175.165.81.177", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:17:24 UTC", "discovered_at": "2026-10-04T22:17:24.000Z" }, { "id": 152201, "urlhaus_id": "3928698", "url": "http://175.173.83.182:55460/i", "host": "175.173.83.182", "host_ip": "175.173.83.182", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:17:12 UTC", "discovered_at": "2026-10-04T22:17:12.000Z" }, { "id": 152202, "urlhaus_id": "3928697", "url": "http://123.11.37.175:53385/i", "host": "123.11.37.175", "host_ip": "123.11.37.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 22:17:11 UTC", "discovered_at": "2026-10-04T22:17:11.000Z" }, { "id": 152203, "urlhaus_id": "3928696", "url": "http://175.173.83.182:55460/bin.sh", "host": "175.173.83.182", "host_ip": "175.173.83.182", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:16:16 UTC", "discovered_at": "2026-10-04T22:16:16.000Z" }, { "id": 152204, "urlhaus_id": "3928695", "url": "http://103.152.100.5:55138/bin.sh", "host": "103.152.100.5", "host_ip": "103.152.100.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 22:03:16 UTC", "discovered_at": "2026-10-04T22:03:16.000Z" }, { "id": 152208, "urlhaus_id": "3928694", "url": "http://115.50.177.89:59352/bin.sh", "host": "115.50.177.89", "host_ip": "115.50.177.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 22:02:13 UTC", "discovered_at": "2026-10-04T22:02:13.000Z" }, { "id": 152207, "urlhaus_id": "3928693", "url": "http://60.22.160.80:53487/i", "host": "60.22.160.80", "host_ip": "60.22.160.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:02:13 UTC", "discovered_at": "2026-10-04T22:02:13.000Z" }, { "id": 152206, "urlhaus_id": "3928692", "url": "http://175.149.69.12:36126/bin.sh", "host": "175.149.69.12", "host_ip": "175.149.69.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 22:02:13 UTC", "discovered_at": "2026-10-04T22:02:13.000Z" }, { "id": 152205, "urlhaus_id": "3928691", "url": "http://59.97.249.223:52004/i", "host": "59.97.249.223", "host_ip": "59.97.249.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 22:02:13 UTC", "discovered_at": "2026-10-04T22:02:13.000Z" }, { "id": 152209, "urlhaus_id": "3928690", "url": "http://123.11.37.175:53385/bin.sh", "host": "123.11.37.175", "host_ip": "123.11.37.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 21:47:17 UTC", "discovered_at": "2026-10-04T21:47:17.000Z" }, { "id": 152210, "urlhaus_id": "3928689", "url": "http://42.227.128.111:47712/i", "host": "42.227.128.111", "host_ip": "42.227.128.111", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 21:47:15 UTC", "discovered_at": "2026-10-04T21:47:15.000Z" }, { "id": 152211, "urlhaus_id": "3928688", "url": "http://222.138.204.136:43912/i", "host": "222.138.204.136", "host_ip": "222.138.204.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 21:47:14 UTC", "discovered_at": "2026-10-04T21:47:14.000Z" }, { "id": 152212, "urlhaus_id": "3928687", "url": "http://193.178.158.57/bin/f83ecc00a27c5716_hwbp_syst_B2nASg1e.exe", "host": "193.178.158.57", "host_ip": "193.178.158.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey, RemusStealer", "last_online": null, "first_seen": "2026-10-04 21:41:14 UTC", "discovered_at": "2026-10-04T21:41:14.000Z" }, { "id": 152213, "urlhaus_id": "3928686", "url": "http://182.112.31.192:54978/i", "host": "182.112.31.192", "host_ip": "182.112.31.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 21:35:31 UTC", "discovered_at": "2026-10-04T21:35:31.000Z" }, { "id": 152214, "urlhaus_id": "3928685", "url": "http://175.147.89.184:45139/bin.sh", "host": "175.147.89.184", "host_ip": "175.147.89.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 21:35:26 UTC", "discovered_at": "2026-10-04T21:35:26.000Z" }, { "id": 152215, "urlhaus_id": "3928684", "url": "http://175.147.89.184:45139/i", "host": "175.147.89.184", "host_ip": "175.147.89.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 21:32:14 UTC", "discovered_at": "2026-10-04T21:32:14.000Z" }, { "id": 152218, "urlhaus_id": "3928683", "url": "http://120.43.15.158:44031/i", "host": "120.43.15.158", "host_ip": "120.43.15.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 21:32:12 UTC", "discovered_at": "2026-10-04T21:32:12.000Z" }, { "id": 152217, "urlhaus_id": "3928682", "url": "http://180.245.56.161:52486/i", "host": "180.245.56.161", "host_ip": "180.245.56.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 21:32:12 UTC", "discovered_at": "2026-10-04T21:32:12.000Z" }, { "id": 152216, "urlhaus_id": "3928681", "url": "http://42.54.66.173:39782/i", "host": "42.54.66.173", "host_ip": "42.54.66.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 21:32:12 UTC", "discovered_at": "2026-10-04T21:32:12.000Z" }, { "id": 152219, "urlhaus_id": "3928680", "url": "http://120.28.137.240:54685/i", "host": "120.28.137.240", "host_ip": "120.28.137.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 21:17:27 UTC", "discovered_at": "2026-10-04T21:17:27.000Z" }, { "id": 152220, "urlhaus_id": "3928679", "url": "http://222.138.204.136:43912/bin.sh", "host": "222.138.204.136", "host_ip": "222.138.204.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 21:17:16 UTC", "discovered_at": "2026-10-04T21:17:16.000Z" }, { "id": 152221, "urlhaus_id": "3928678", "url": "http://175.148.153.150:47397/bin.sh", "host": "175.148.153.150", "host_ip": "175.148.153.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 21:17:15 UTC", "discovered_at": "2026-10-04T21:17:15.000Z" }, { "id": 152222, "urlhaus_id": "3928677", "url": "http://119.179.254.21:46193/bin.sh", "host": "119.179.254.21", "host_ip": "119.179.254.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 21:02:09 UTC", "discovered_at": "2026-10-04T21:02:09.000Z" }, { "id": 152223, "urlhaus_id": "3928676", "url": "http://222.139.45.127:43346/bin.sh", "host": "222.139.45.127", "host_ip": "222.139.45.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 21:01:23 UTC", "discovered_at": "2026-10-04T21:01:23.000Z" }, { "id": 152224, "urlhaus_id": "3928675", "url": "http://220.201.74.15:44269/bin.sh", "host": "220.201.74.15", "host_ip": "220.201.74.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 20:52:19 UTC", "discovered_at": "2026-10-04T20:52:19.000Z" }, { "id": 152225, "urlhaus_id": "3928674", "url": "http://123.5.9.104:45417/i", "host": "123.5.9.104", "host_ip": "123.5.9.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 20:48:09 UTC", "discovered_at": "2026-10-04T20:48:09.000Z" }, { "id": 152226, "urlhaus_id": "3928673", "url": "http://123.5.9.104:45417/bin.sh", "host": "123.5.9.104", "host_ip": "123.5.9.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 20:47:14 UTC", "discovered_at": "2026-10-04T20:47:14.000Z" }, { "id": 152228, "urlhaus_id": "3928672", "url": "http://120.28.137.240:54685/bin.sh", "host": "120.28.137.240", "host_ip": "120.28.137.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 20:47:13 UTC", "discovered_at": "2026-10-04T20:47:13.000Z" }, { "id": 152227, "urlhaus_id": "3928671", "url": "http://125.41.73.51:35908/i", "host": "125.41.73.51", "host_ip": "125.41.73.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 20:47:13 UTC", "discovered_at": "2026-10-04T20:47:13.000Z" }, { "id": 152229, "urlhaus_id": "3928670", "url": "http://123.190.224.122:34015/i", "host": "123.190.224.122", "host_ip": "123.190.224.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 20:45:26 UTC", "discovered_at": "2026-10-04T20:45:26.000Z" }, { "id": 152231, "urlhaus_id": "3928669", "url": "http://115.48.144.54:50368/i", "host": "115.48.144.54", "host_ip": "115.48.144.54", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:32:14 UTC", "discovered_at": "2026-10-04T20:32:14.000Z" }, { "id": 152230, "urlhaus_id": "3928668", "url": "http://175.167.160.231:39578/i", "host": "175.167.160.231", "host_ip": "175.167.160.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:32:14 UTC", "discovered_at": "2026-10-04T20:32:14.000Z" }, { "id": 152233, "urlhaus_id": "3928667", "url": "http://113.237.104.148:53693/i", "host": "113.237.104.148", "host_ip": "113.237.104.148", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:32:13 UTC", "discovered_at": "2026-10-04T20:32:13.000Z" }, { "id": 152232, "urlhaus_id": "3928666", "url": "http://120.28.195.142:55751/i", "host": "120.28.195.142", "host_ip": "120.28.195.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 20:32:13 UTC", "discovered_at": "2026-10-04T20:32:13.000Z" }, { "id": 152234, "urlhaus_id": "3928665", "url": "http://42.56.41.233:56405/i", "host": "42.56.41.233", "host_ip": "42.56.41.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:17:13 UTC", "discovered_at": "2026-10-04T20:17:13.000Z" }, { "id": 152236, "urlhaus_id": "3928664", "url": "http://27.219.3.204:49278/bin.sh", "host": "27.219.3.204", "host_ip": "27.219.3.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 20:17:12 UTC", "discovered_at": "2026-10-04T20:17:12.000Z" }, { "id": 152235, "urlhaus_id": "3928663", "url": "http://175.165.86.203:54160/i", "host": "175.165.86.203", "host_ip": "175.165.86.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:17:12 UTC", "discovered_at": "2026-10-04T20:17:12.000Z" }, { "id": 152237, "urlhaus_id": "3928662", "url": "http://123.190.224.122:34015/bin.sh", "host": "123.190.224.122", "host_ip": "123.190.224.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 20:16:22 UTC", "discovered_at": "2026-10-04T20:16:22.000Z" }, { "id": 152238, "urlhaus_id": "3928661", "url": "http://175.151.104.143:37585/i", "host": "175.151.104.143", "host_ip": "175.151.104.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:02:16 UTC", "discovered_at": "2026-10-04T20:02:16.000Z" }, { "id": 152239, "urlhaus_id": "3928660", "url": "http://60.23.170.10:54006/i", "host": "60.23.170.10", "host_ip": "60.23.170.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:02:14 UTC", "discovered_at": "2026-10-04T20:02:14.000Z" }, { "id": 152241, "urlhaus_id": "3928659", "url": "http://175.165.81.126:43499/i", "host": "175.165.81.126", "host_ip": "175.165.81.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:02:13 UTC", "discovered_at": "2026-10-04T20:02:13.000Z" }, { "id": 152240, "urlhaus_id": "3928658", "url": "http://92.243.113.232:16844/bin.sh", "host": "92.243.113.232", "host_ip": "92.243.113.232", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 20:02:13 UTC", "discovered_at": "2026-10-04T20:02:13.000Z" }, { "id": 152242, "urlhaus_id": "3928657", "url": "http://179.61.221.162/bins/morte.i686", "host": "179.61.221.162", "host_ip": "179.61.221.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mirai, x86-32", "last_online": null, "first_seen": "2026-10-04 19:53:24 UTC", "discovered_at": "2026-10-04T19:53:24.000Z" }, { "id": 152243, "urlhaus_id": "3928656", "url": "http://202.107.98.237:54547/bin.sh", "host": "202.107.98.237", "host_ip": "202.107.98.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 19:47:14 UTC", "discovered_at": "2026-10-04T19:47:14.000Z" }, { "id": 152244, "urlhaus_id": "3928655", "url": "http://125.41.6.124:44579/i", "host": "125.41.6.124", "host_ip": "125.41.6.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 19:32:12 UTC", "discovered_at": "2026-10-04T19:32:12.000Z" }, { "id": 152245, "urlhaus_id": "3928654", "url": "http://175.165.81.126:43499/bin.sh", "host": "175.165.81.126", "host_ip": "175.165.81.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 19:31:21 UTC", "discovered_at": "2026-10-04T19:31:21.000Z" }, { "id": 152246, "urlhaus_id": "3928653", "url": "http://117.245.141.97:50793/i", "host": "117.245.141.97", "host_ip": "117.245.141.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 19:31:18 UTC", "discovered_at": "2026-10-04T19:31:18.000Z" }, { "id": 152248, "urlhaus_id": "3928652", "url": "http://116.72.151.234:45914/i", "host": "116.72.151.234", "host_ip": "116.72.151.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 19:17:13 UTC", "discovered_at": "2026-10-04T19:17:13.000Z" }, { "id": 152247, "urlhaus_id": "3928651", "url": "http://175.165.86.203:54160/bin.sh", "host": "175.165.86.203", "host_ip": "175.165.86.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 19:17:13 UTC", "discovered_at": "2026-10-04T19:17:13.000Z" }, { "id": 152249, "urlhaus_id": "3928650", "url": "http://115.63.8.6:42824/i", "host": "115.63.8.6", "host_ip": "115.63.8.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 19:17:12 UTC", "discovered_at": "2026-10-04T19:17:12.000Z" }, { "id": 152250, "urlhaus_id": "3928649", "url": "http://163.142.95.133:35060/i", "host": "163.142.95.133", "host_ip": "163.142.95.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 19:02:16 UTC", "discovered_at": "2026-10-04T19:02:16.000Z" }, { "id": 152252, "urlhaus_id": "3928648", "url": "http://119.109.131.25:46544/i", "host": "119.109.131.25", "host_ip": "119.109.131.25", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 19:02:15 UTC", "discovered_at": "2026-10-04T19:02:15.000Z" }, { "id": 152251, "urlhaus_id": "3928647", "url": "http://222.127.77.227:55176/i", "host": "222.127.77.227", "host_ip": "222.127.77.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 19:02:15 UTC", "discovered_at": "2026-10-04T19:02:15.000Z" }, { "id": 150465, "urlhaus_id": "3928646", "url": "http://59.180.137.179:51827/i", "host": "59.180.137.179", "host_ip": "59.180.137.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 18:47:22 UTC", "discovered_at": "2026-10-04T18:47:22.000Z" }, { "id": 150466, "urlhaus_id": "3928645", "url": "http://42.224.13.6:40505/i", "host": "42.224.13.6", "host_ip": "42.224.13.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 18:47:13 UTC", "discovered_at": "2026-10-04T18:47:13.000Z" }, { "id": 150468, "urlhaus_id": "3928644", "url": "http://202.1.26.20:60510/i", "host": "202.1.26.20", "host_ip": "202.1.26.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 18:47:12 UTC", "discovered_at": "2026-10-04T18:47:12.000Z" }, { "id": 150467, "urlhaus_id": "3928643", "url": "http://176.90.0.152:34016/i", "host": "176.90.0.152", "host_ip": "176.90.0.152", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 18:47:12 UTC", "discovered_at": "2026-10-04T18:47:12.000Z" }, { "id": 150469, "urlhaus_id": "3928642", "url": "http://79.165.94.220:60716/i", "host": "79.165.94.220", "host_ip": "79.165.94.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 18:47:11 UTC", "discovered_at": "2026-10-04T18:47:11.000Z" }, { "id": 150470, "urlhaus_id": "3928641", "url": "http://116.139.126.104:44390/i", "host": "116.139.126.104", "host_ip": "116.139.126.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 18:36:32 UTC", "discovered_at": "2026-10-04T18:36:32.000Z" }, { "id": 150471, "urlhaus_id": "3928640", "url": "http://103.249.199.5:35908/i", "host": "103.249.199.5", "host_ip": "103.249.199.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 18:33:13 UTC", "discovered_at": "2026-10-04T18:33:13.000Z" }, { "id": 150472, "urlhaus_id": "3928639", "url": "http://202.1.26.20:60510/bin.sh", "host": "202.1.26.20", "host_ip": "202.1.26.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 18:32:19 UTC", "discovered_at": "2026-10-04T18:32:19.000Z" }, { "id": 150473, "urlhaus_id": "3928638", "url": "http://119.102.60.79:43236/bin.sh", "host": "119.102.60.79", "host_ip": "119.102.60.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 18:32:18 UTC", "discovered_at": "2026-10-04T18:32:18.000Z" }, { "id": 150475, "urlhaus_id": "3928637", "url": "http://222.127.77.227:55176/bin.sh", "host": "222.127.77.227", "host_ip": "222.127.77.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 18:32:17 UTC", "discovered_at": "2026-10-04T18:32:17.000Z" }, { "id": 150474, "urlhaus_id": "3928636", "url": "http://182.121.159.55:48564/i", "host": "182.121.159.55", "host_ip": "182.121.159.55", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 18:32:17 UTC", "discovered_at": "2026-10-04T18:32:17.000Z" }, { "id": 150476, "urlhaus_id": "3928635", "url": "http://221.200.216.14:59095/bin.sh", "host": "221.200.216.14", "host_ip": "221.200.216.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 18:17:11 UTC", "discovered_at": "2026-10-04T18:17:11.000Z" }, { "id": 150477, "urlhaus_id": "3928634", "url": "http://119.185.242.157:48194/bin.sh", "host": "119.185.242.157", "host_ip": "119.185.242.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 18:17:10 UTC", "discovered_at": "2026-10-04T18:17:10.000Z" }, { "id": 150478, "urlhaus_id": "3928633", "url": "http://182.121.159.55:48564/bin.sh", "host": "182.121.159.55", "host_ip": "182.121.159.55", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 18:02:17 UTC", "discovered_at": "2026-10-04T18:02:17.000Z" }, { "id": 150479, "urlhaus_id": "3928632", "url": "http://36.84.112.242:59937/bin.sh", "host": "36.84.112.242", "host_ip": "36.84.112.242", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 18:02:16 UTC", "discovered_at": "2026-10-04T18:02:16.000Z" }, { "id": 150480, "urlhaus_id": "3928631", "url": "http://222.127.53.189:35045/i", "host": "222.127.53.189", "host_ip": "222.127.53.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 18:02:15 UTC", "discovered_at": "2026-10-04T18:02:15.000Z" }, { "id": 150481, "urlhaus_id": "3928630", "url": "http://110.138.128.226:40253/bin.sh", "host": "110.138.128.226", "host_ip": "110.138.128.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 17:47:12 UTC", "discovered_at": "2026-10-04T17:47:12.000Z" }, { "id": 150484, "urlhaus_id": "3928629", "url": "http://42.176.199.179:54512/i", "host": "42.176.199.179", "host_ip": "42.176.199.179", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:47:11 UTC", "discovered_at": "2026-10-04T17:47:11.000Z" }, { "id": 150483, "urlhaus_id": "3928628", "url": "http://60.23.236.8:37564/i", "host": "60.23.236.8", "host_ip": "60.23.236.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:47:11 UTC", "discovered_at": "2026-10-04T17:47:11.000Z" }, { "id": 150482, "urlhaus_id": "3928627", "url": "http://123.129.135.105:49561/bin.sh", "host": "123.129.135.105", "host_ip": "123.129.135.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 17:47:11 UTC", "discovered_at": "2026-10-04T17:47:11.000Z" }, { "id": 150485, "urlhaus_id": "3928626", "url": "http://220.192.32.134:52203/i", "host": "220.192.32.134", "host_ip": "220.192.32.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 17:44:29 UTC", "discovered_at": "2026-10-04T17:44:29.000Z" }, { "id": 150486, "urlhaus_id": "3928625", "url": "http://59.180.149.27:38042/i", "host": "59.180.149.27", "host_ip": "59.180.149.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 17:32:28 UTC", "discovered_at": "2026-10-04T17:32:28.000Z" }, { "id": 150487, "urlhaus_id": "3928624", "url": "http://216.126.71.86:60682/i", "host": "216.126.71.86", "host_ip": "216.126.71.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:32:15 UTC", "discovered_at": "2026-10-04T17:32:15.000Z" }, { "id": 150488, "urlhaus_id": "3928623", "url": "http://115.55.8.132:47071/i", "host": "115.55.8.132", "host_ip": "115.55.8.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 17:28:28 UTC", "discovered_at": "2026-10-04T17:28:28.000Z" }, { "id": 150489, "urlhaus_id": "3928622", "url": "http://115.55.8.132:47071/bin.sh", "host": "115.55.8.132", "host_ip": "115.55.8.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 17:21:24 UTC", "discovered_at": "2026-10-04T17:21:24.000Z" }, { "id": 150490, "urlhaus_id": "3928621", "url": "http://119.118.38.153:37641/bin.sh", "host": "119.118.38.153", "host_ip": "119.118.38.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:17:28 UTC", "discovered_at": "2026-10-04T17:17:28.000Z" }, { "id": 150491, "urlhaus_id": "3928620", "url": "http://120.84.212.89:44234/i", "host": "120.84.212.89", "host_ip": "120.84.212.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:17:20 UTC", "discovered_at": "2026-10-04T17:17:20.000Z" }, { "id": 150492, "urlhaus_id": "3928619", "url": "http://123.190.226.46:59540/i", "host": "123.190.226.46", "host_ip": "123.190.226.46", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:17:16 UTC", "discovered_at": "2026-10-04T17:17:16.000Z" }, { "id": 150494, "urlhaus_id": "3928618", "url": "http://123.189.17.192:36815/i", "host": "123.189.17.192", "host_ip": "123.189.17.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:17:15 UTC", "discovered_at": "2026-10-04T17:17:15.000Z" }, { "id": 150493, "urlhaus_id": "3928617", "url": "http://180.165.31.92:57423/i", "host": "180.165.31.92", "host_ip": "180.165.31.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 17:17:15 UTC", "discovered_at": "2026-10-04T17:17:15.000Z" }, { "id": 150495, "urlhaus_id": "3928616", "url": "http://220.192.32.134:52203/bin.sh", "host": "220.192.32.134", "host_ip": "220.192.32.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 17:16:31 UTC", "discovered_at": "2026-10-04T17:16:31.000Z" }, { "id": 150496, "urlhaus_id": "3928615", "url": "http://45.163.85.239:33663/i", "host": "45.163.85.239", "host_ip": "45.163.85.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 17:02:23 UTC", "discovered_at": "2026-10-04T17:02:23.000Z" }, { "id": 150497, "urlhaus_id": "3928614", "url": "http://115.50.152.230:50774/i", "host": "115.50.152.230", "host_ip": "115.50.152.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 17:02:10 UTC", "discovered_at": "2026-10-04T17:02:10.000Z" }, { "id": 150499, "urlhaus_id": "3928613", "url": "http://180.165.31.92:57423/bin.sh", "host": "180.165.31.92", "host_ip": "180.165.31.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 16:47:14 UTC", "discovered_at": "2026-10-04T16:47:14.000Z" }, { "id": 150498, "urlhaus_id": "3928612", "url": "http://221.15.144.165:40651/bin.sh", "host": "221.15.144.165", "host_ip": "221.15.144.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 16:47:14 UTC", "discovered_at": "2026-10-04T16:47:14.000Z" }, { "id": 150504, "urlhaus_id": "3928611", "url": "http://182.240.203.200:57733/bin.sh", "host": "182.240.203.200", "host_ip": "182.240.203.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 16:47:13 UTC", "discovered_at": "2026-10-04T16:47:13.000Z" }, { "id": 150503, "urlhaus_id": "3928610", "url": "http://60.23.154.251:58373/bin.sh", "host": "60.23.154.251", "host_ip": "60.23.154.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:47:13 UTC", "discovered_at": "2026-10-04T16:47:13.000Z" }, { "id": 150502, "urlhaus_id": "3928609", "url": "http://170.238.123.135:53029/i", "host": "170.238.123.135", "host_ip": "170.238.123.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 16:47:13 UTC", "discovered_at": "2026-10-04T16:47:13.000Z" }, { "id": 150501, "urlhaus_id": "3928608", "url": "http://60.18.50.149:47541/i", "host": "60.18.50.149", "host_ip": "60.18.50.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:47:13 UTC", "discovered_at": "2026-10-04T16:47:13.000Z" }, { "id": 150500, "urlhaus_id": "3928607", "url": "http://182.112.0.251:34447/bin.sh", "host": "182.112.0.251", "host_ip": "182.112.0.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 16:47:13 UTC", "discovered_at": "2026-10-04T16:47:13.000Z" }, { "id": 150505, "urlhaus_id": "3928606", "url": "http://42.224.125.195:60402/bin.sh", "host": "42.224.125.195", "host_ip": "42.224.125.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 16:46:31 UTC", "discovered_at": "2026-10-04T16:46:31.000Z" }, { "id": 150506, "urlhaus_id": "3928605", "url": "http://123.189.17.192:36815/bin.sh", "host": "123.189.17.192", "host_ip": "123.189.17.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:46:14 UTC", "discovered_at": "2026-10-04T16:46:14.000Z" }, { "id": 150507, "urlhaus_id": "3928604", "url": "http://60.23.238.145:52985/bin.sh", "host": "60.23.238.145", "host_ip": "60.23.238.145", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:32:20 UTC", "discovered_at": "2026-10-04T16:32:20.000Z" }, { "id": 150510, "urlhaus_id": "3928603", "url": "http://45.177.32.104:49383/bin.sh", "host": "45.177.32.104", "host_ip": "45.177.32.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 16:31:16 UTC", "discovered_at": "2026-10-04T16:31:16.000Z" }, { "id": 150509, "urlhaus_id": "3928602", "url": "http://115.50.152.230:50774/bin.sh", "host": "115.50.152.230", "host_ip": "115.50.152.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 16:31:16 UTC", "discovered_at": "2026-10-04T16:31:16.000Z" }, { "id": 150508, "urlhaus_id": "3928601", "url": "http://175.148.153.150:47397/i", "host": "175.148.153.150", "host_ip": "175.148.153.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:31:16 UTC", "discovered_at": "2026-10-04T16:31:16.000Z" }, { "id": 150511, "urlhaus_id": "3928600", "url": "http://101.51.52.106:56461/i", "host": "101.51.52.106", "host_ip": "101.51.52.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 16:29:14 UTC", "discovered_at": "2026-10-04T16:29:14.000Z" }, { "id": 150512, "urlhaus_id": "3928599", "url": "http://60.18.50.149:47541/bin.sh", "host": "60.18.50.149", "host_ip": "60.18.50.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:17:21 UTC", "discovered_at": "2026-10-04T16:17:21.000Z" }, { "id": 150513, "urlhaus_id": "3928598", "url": "http://175.165.80.12:39235/bin.sh", "host": "175.165.80.12", "host_ip": "175.165.80.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:17:16 UTC", "discovered_at": "2026-10-04T16:17:16.000Z" }, { "id": 150516, "urlhaus_id": "3928597", "url": "http://60.18.101.68:45478/bin.sh", "host": "60.18.101.68", "host_ip": "60.18.101.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:17:15 UTC", "discovered_at": "2026-10-04T16:17:15.000Z" }, { "id": 150515, "urlhaus_id": "3928596", "url": "http://119.179.254.21:46193/i", "host": "119.179.254.21", "host_ip": "119.179.254.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 16:17:15 UTC", "discovered_at": "2026-10-04T16:17:15.000Z" }, { "id": 150514, "urlhaus_id": "3928595", "url": "http://87.68.237.92:42674/bin.sh", "host": "87.68.237.92", "host_ip": "87.68.237.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 16:17:15 UTC", "discovered_at": "2026-10-04T16:17:15.000Z" }, { "id": 150517, "urlhaus_id": "3928594", "url": "http://27.202.215.44:38350/i", "host": "27.202.215.44", "host_ip": "27.202.215.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 16:01:15 UTC", "discovered_at": "2026-10-04T16:01:15.000Z" }, { "id": 150518, "urlhaus_id": "3928593", "url": "http://175.147.88.251:37270/i", "host": "175.147.88.251", "host_ip": "175.147.88.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 15:47:15 UTC", "discovered_at": "2026-10-04T15:47:15.000Z" }, { "id": 150519, "urlhaus_id": "3928592", "url": "http://123.190.16.227:51354/bin.sh", "host": "123.190.16.227", "host_ip": "123.190.16.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 15:47:14 UTC", "discovered_at": "2026-10-04T15:47:14.000Z" }, { "id": 150520, "urlhaus_id": "3928591", "url": "http://143.20.154.42/bins/bot.x86_64", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "64-bit, elf, mirai, x86-64", "last_online": null, "first_seen": "2026-10-04 15:44:24 UTC", "discovered_at": "2026-10-04T15:44:24.000Z" }, { "id": 150522, "urlhaus_id": "3928590", "url": "http://175.147.88.251:37270/bin.sh", "host": "175.147.88.251", "host_ip": "175.147.88.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 15:32:13 UTC", "discovered_at": "2026-10-04T15:32:13.000Z" }, { "id": 150521, "urlhaus_id": "3928589", "url": "http://27.202.215.44:38350/bin.sh", "host": "27.202.215.44", "host_ip": "27.202.215.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 15:32:13 UTC", "discovered_at": "2026-10-04T15:32:13.000Z" }, { "id": 150523, "urlhaus_id": "3928588", "url": "http://42.57.205.133:55031/i", "host": "42.57.205.133", "host_ip": "42.57.205.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 15:23:17 UTC", "discovered_at": "2026-10-04T15:23:17.000Z" }, { "id": 150524, "urlhaus_id": "3928587", "url": "http://182.127.112.11:36544/i", "host": "182.127.112.11", "host_ip": "182.127.112.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-04 15:08:26 UTC", "discovered_at": "2026-10-04T15:08:26.000Z" }, { "id": 150526, "urlhaus_id": "3928586", "url": "http://180.243.50.122:52226/i", "host": "180.243.50.122", "host_ip": "180.243.50.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 15:02:17 UTC", "discovered_at": "2026-10-04T15:02:17.000Z" }, { "id": 150525, "urlhaus_id": "3928585", "url": "http://39.79.155.243:44976/i", "host": "39.79.155.243", "host_ip": "39.79.155.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 15:02:17 UTC", "discovered_at": "2026-10-04T15:02:17.000Z" }, { "id": 150527, "urlhaus_id": "3928584", "url": "http://182.121.192.65:34449/i", "host": "182.121.192.65", "host_ip": "182.121.192.65", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 14:46:11 UTC", "discovered_at": "2026-10-04T14:46:11.000Z" }, { "id": 150528, "urlhaus_id": "3928583", "url": "http://182.116.121.105:35375/i", "host": "182.116.121.105", "host_ip": "182.116.121.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 14:40:25 UTC", "discovered_at": "2026-10-04T14:40:25.000Z" }, { "id": 150529, "urlhaus_id": "3928582", "url": "http://42.224.96.255:60757/i", "host": "42.224.96.255", "host_ip": "42.224.96.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 14:32:13 UTC", "discovered_at": "2026-10-04T14:32:13.000Z" }, { "id": 150532, "urlhaus_id": "3928581", "url": "http://125.40.122.6:35820/bin.sh", "host": "125.40.122.6", "host_ip": "125.40.122.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 14:32:12 UTC", "discovered_at": "2026-10-04T14:32:12.000Z" }, { "id": 150531, "urlhaus_id": "3928580", "url": "http://120.84.214.219:46724/i", "host": "120.84.214.219", "host_ip": "120.84.214.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 14:32:12 UTC", "discovered_at": "2026-10-04T14:32:12.000Z" }, { "id": 150530, "urlhaus_id": "3928579", "url": "http://203.177.177.85:34139/i", "host": "203.177.177.85", "host_ip": "203.177.177.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 14:32:12 UTC", "discovered_at": "2026-10-04T14:32:12.000Z" }, { "id": 150533, "urlhaus_id": "3928578", "url": "http://176.65.139.201:8080/nyx_bot_linux_amd64_packed", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "64-bit, elf, mirai, x86-64", "last_online": null, "first_seen": "2026-10-04 14:22:22 UTC", "discovered_at": "2026-10-04T14:22:22.000Z" }, { "id": 150535, "urlhaus_id": "3928577", "url": "http://154.223.128.222:45986/i", "host": "154.223.128.222", "host_ip": "154.223.128.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 14:16:17 UTC", "discovered_at": "2026-10-04T14:16:17.000Z" }, { "id": 150534, "urlhaus_id": "3928576", "url": "http://203.177.177.85:34139/bin.sh", "host": "203.177.177.85", "host_ip": "203.177.177.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 14:16:17 UTC", "discovered_at": "2026-10-04T14:16:17.000Z" }, { "id": 150536, "urlhaus_id": "3928575", "url": "https://github.com/niehgns/yo/raw/refs/heads/main/corzclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 14:10:39 UTC", "discovered_at": "2026-10-04T14:10:39.000Z" }, { "id": 150538, "urlhaus_id": "3928574", "url": "https://donutsmpclient.com/__l5e/assets-v1/0159fb8d-0aea-4905-940b-7f47e0c85044/GoobaClient-1.21.11.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 14:10:33 UTC", "discovered_at": "2026-10-04T14:10:33.000Z" }, { "id": 150537, "urlhaus_id": "3928573", "url": "https://github.com/niehgns/yo/raw/b083a17e2058608736141ae8d491d79d5c2819bd/corzclientcracked-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 14:10:33 UTC", "discovered_at": "2026-10-04T14:10:33.000Z" }, { "id": 150539, "urlhaus_id": "3928572", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/saitama.exe", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-04 14:10:20 UTC", "discovered_at": "2026-10-04T14:10:20.000Z" }, { "id": 150543, "urlhaus_id": "3928571", "url": "https://donutsmpclient.com/__l5e/assets-v1/891584e3-cb79-4fbd-b302-c99f9a899cf5/WaterClientV6.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 14:10:19 UTC", "discovered_at": "2026-10-04T14:10:19.000Z" }, { "id": 150542, "urlhaus_id": "3928570", "url": "https://donutsmpdupe.com/files/DonutSMPDupe.jar", "host": "donutsmpdupe.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 14:10:19 UTC", "discovered_at": "2026-10-04T14:10:19.000Z" }, { "id": 150541, "urlhaus_id": "3928569", "url": "https://donutsmpclient.com/__l5e/assets-v1/23dd2aa2-8e72-4c23-9500-e085982cefc0/FrostClientV2-1.21.11.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 14:10:19 UTC", "discovered_at": "2026-10-04T14:10:19.000Z" }, { "id": 150540, "urlhaus_id": "3928568", "url": "https://donutsmpclient.com/__l5e/assets-v1/5de3fe7f-b6da-433f-8c99-35b3302c6005/FakeClientV3-1.21.11.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 14:10:19 UTC", "discovered_at": "2026-10-04T14:10:19.000Z" }, { "id": 150544, "urlhaus_id": "3928567", "url": "http://120.84.214.219:46724/bin.sh", "host": "120.84.214.219", "host_ip": "120.84.214.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 14:02:17 UTC", "discovered_at": "2026-10-04T14:02:17.000Z" }, { "id": 150545, "urlhaus_id": "3928566", "url": "http://123.12.236.162:44020/i", "host": "123.12.236.162", "host_ip": "123.12.236.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 14:02:11 UTC", "discovered_at": "2026-10-04T14:02:11.000Z" }, { "id": 150546, "urlhaus_id": "3928565", "url": "http://210.208.104.156:34238/i", "host": "210.208.104.156", "host_ip": "210.208.104.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 13:59:17 UTC", "discovered_at": "2026-10-04T13:59:17.000Z" }, { "id": 150548, "urlhaus_id": "3928564", "url": "http://42.226.65.18:39212/bin.sh", "host": "42.226.65.18", "host_ip": "42.226.65.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 13:47:13 UTC", "discovered_at": "2026-10-04T13:47:13.000Z" }, { "id": 150547, "urlhaus_id": "3928563", "url": "http://180.190.203.41:50927/bin.sh", "host": "180.190.203.41", "host_ip": "180.190.203.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 13:47:13 UTC", "discovered_at": "2026-10-04T13:47:13.000Z" }, { "id": 150549, "urlhaus_id": "3928562", "url": "http://113.230.63.71:50480/i", "host": "113.230.63.71", "host_ip": "113.230.63.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 13:32:10 UTC", "discovered_at": "2026-10-04T13:32:10.000Z" }, { "id": 150550, "urlhaus_id": "3928561", "url": "http://210.208.104.156:34238/bin.sh", "host": "210.208.104.156", "host_ip": "210.208.104.156", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 13:30:25 UTC", "discovered_at": "2026-10-04T13:30:25.000Z" }, { "id": 150551, "urlhaus_id": "3928560", "url": "https://cdn.discordapp.com/attachments/1521843051192909974/1556292036628316191/bundle.zip?ex=6ac3a168&is=6ac24fe8&hm=58f1be0d4cd105b7ec5303f5f0226d507ffde9335bcd81d86b4c292e5fc4a5a6&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-04 13:28:36 UTC", "discovered_at": "2026-10-04T13:28:36.000Z" }, { "id": 150552, "urlhaus_id": "3928559", "url": "http://77.110.102.43/ed04570fa?force=1", "host": "77.110.102.43", "host_ip": "77.110.102.43", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-04 13:28:22 UTC", "discovered_at": "2026-10-04T13:28:22.000Z" }, { "id": 150553, "urlhaus_id": "3928558", "url": "http://77.221.153.100/d2503d96a3?force=1", "host": "77.221.153.100", "host_ip": "77.221.153.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix", "last_online": null, "first_seen": "2026-10-04 13:28:18 UTC", "discovered_at": "2026-10-04T13:28:18.000Z" }, { "id": 150554, "urlhaus_id": "3928557", "url": "http://89.163.157.131:8080/x86_64", "host": "89.163.157.131", "host_ip": "89.163.157.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 13:28:17 UTC", "discovered_at": "2026-10-04T13:28:17.000Z" }, { "id": 150555, "urlhaus_id": "3928556", "url": "http://89.163.157.131:8080/persist.sh", "host": "89.163.157.131", "host_ip": "89.163.157.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-04 13:28:13 UTC", "discovered_at": "2026-10-04T13:28:13.000Z" }, { "id": 150556, "urlhaus_id": "3928555", "url": "http://113.230.63.71:50480/bin.sh", "host": "113.230.63.71", "host_ip": "113.230.63.71", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 13:17:25 UTC", "discovered_at": "2026-10-04T13:17:25.000Z" }, { "id": 150557, "urlhaus_id": "3928554", "url": "http://158.255.83.39:39532/i", "host": "158.255.83.39", "host_ip": "158.255.83.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 13:17:15 UTC", "discovered_at": "2026-10-04T13:17:15.000Z" }, { "id": 150558, "urlhaus_id": "3928553", "url": "http://219.155.201.253:49340/bin.sh", "host": "219.155.201.253", "host_ip": "219.155.201.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 13:17:13 UTC", "discovered_at": "2026-10-04T13:17:13.000Z" }, { "id": 150567, "urlhaus_id": "3928552", "url": "http://176.65.139.139/Binarys/Owari.arm7", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150566, "urlhaus_id": "3928551", "url": "http://176.65.139.139/Binarys/Owari.sh4", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150565, "urlhaus_id": "3928550", "url": "http://176.65.139.139/Binarys/Owari.x86", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150564, "urlhaus_id": "3928549", "url": "http://176.65.139.139/Binarys/Owari.arm6", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150563, "urlhaus_id": "3928548", "url": "http://176.65.139.139/Binarys/Owari.mips", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150562, "urlhaus_id": "3928547", "url": "http://176.65.139.139/Binarys/Owari.arm", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150561, "urlhaus_id": "3928546", "url": "http://176.65.139.139/Binarys/Owari.ppc", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150560, "urlhaus_id": "3928545", "url": "http://176.65.139.139/Binarys/Owari.arm5", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150559, "urlhaus_id": "3928544", "url": "http://176.65.139.139/Binarys/Owari.mpsl", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:24 UTC", "discovered_at": "2026-10-04T13:15:24.000Z" }, { "id": 150569, "urlhaus_id": "3928543", "url": "http://31.129.2.46:55739/bin.sh", "host": "31.129.2.46", "host_ip": "31.129.2.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 13:15:12 UTC", "discovered_at": "2026-10-04T13:15:12.000Z" }, { "id": 150568, "urlhaus_id": "3928542", "url": "http://176.65.139.139/Binarys/Owari.m68k", "host": "176.65.139.139", "host_ip": "176.65.139.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 13:15:12 UTC", "discovered_at": "2026-10-04T13:15:12.000Z" }, { "id": 150570, "urlhaus_id": "3928541", "url": "http://42.59.237.213:36906/i", "host": "42.59.237.213", "host_ip": "42.59.237.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 13:02:14 UTC", "discovered_at": "2026-10-04T13:02:14.000Z" }, { "id": 150571, "urlhaus_id": "3928540", "url": "http://163.142.85.142:56944/i", "host": "163.142.85.142", "host_ip": "163.142.85.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 13:01:14 UTC", "discovered_at": "2026-10-04T13:01:14.000Z" }, { "id": 150574, "urlhaus_id": "3928539", "url": "http://176.65.148.144/bins/Hilix.arm6", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:56:26 UTC", "discovered_at": "2026-10-04T12:56:26.000Z" }, { "id": 150573, "urlhaus_id": "3928538", "url": "http://176.65.148.144/bins/Hilix.arm5", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:56:26 UTC", "discovered_at": "2026-10-04T12:56:26.000Z" }, { "id": 150572, "urlhaus_id": "3928537", "url": "http://176.65.148.144/bins/Hilix.ppc", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:56:26 UTC", "discovered_at": "2026-10-04T12:56:26.000Z" }, { "id": 150578, "urlhaus_id": "3928536", "url": "http://176.65.148.144/bins/Hilix.mips", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:55:16 UTC", "discovered_at": "2026-10-04T12:55:16.000Z" }, { "id": 150577, "urlhaus_id": "3928535", "url": "http://176.65.148.144/bins/Hilix.arm", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:55:16 UTC", "discovered_at": "2026-10-04T12:55:16.000Z" }, { "id": 150576, "urlhaus_id": "3928534", "url": "http://176.65.148.144/bins/Hilix.sh4", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:55:16 UTC", "discovered_at": "2026-10-04T12:55:16.000Z" }, { "id": 150575, "urlhaus_id": "3928533", "url": "http://176.65.148.144/bins/Hilix.mpsl", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:55:16 UTC", "discovered_at": "2026-10-04T12:55:16.000Z" }, { "id": 150581, "urlhaus_id": "3928532", "url": "http://176.65.148.144/bins/Hilix.arm7", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:54:25 UTC", "discovered_at": "2026-10-04T12:54:25.000Z" }, { "id": 150580, "urlhaus_id": "3928531", "url": "http://176.65.148.144/bins/Hilix.x86", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:54:25 UTC", "discovered_at": "2026-10-04T12:54:25.000Z" }, { "id": 150579, "urlhaus_id": "3928530", "url": "http://176.65.148.144/bins/Hilix.m68k", "host": "176.65.148.144", "host_ip": "176.65.148.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:54:25 UTC", "discovered_at": "2026-10-04T12:54:25.000Z" }, { "id": 150582, "urlhaus_id": "3928529", "url": "http://60.23.236.8:37564/bin.sh", "host": "60.23.236.8", "host_ip": "60.23.236.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 12:47:28 UTC", "discovered_at": "2026-10-04T12:47:28.000Z" }, { "id": 150583, "urlhaus_id": "3928528", "url": "http://42.59.237.213:36906/bin.sh", "host": "42.59.237.213", "host_ip": "42.59.237.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 12:47:16 UTC", "discovered_at": "2026-10-04T12:47:16.000Z" }, { "id": 150584, "urlhaus_id": "3928527", "url": "http://115.57.244.183:37148/i", "host": "115.57.244.183", "host_ip": "115.57.244.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 12:47:15 UTC", "discovered_at": "2026-10-04T12:47:15.000Z" }, { "id": 150585, "urlhaus_id": "3928526", "url": "http://project0.cc/f/m/.X0-lock_x86_64", "host": "project0.cc", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "CoinMiner, elf", "last_online": null, "first_seen": "2026-10-04 12:37:30 UTC", "discovered_at": "2026-10-04T12:37:30.000Z" }, { "id": 150586, "urlhaus_id": "3928525", "url": "http://42.224.146.34:55637/bin.sh", "host": "42.224.146.34", "host_ip": "42.224.146.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 12:31:29 UTC", "discovered_at": "2026-10-04T12:31:29.000Z" }, { "id": 150587, "urlhaus_id": "3928524", "url": "http://31.56.52.6:7768/dl.sh", "host": "31.56.52.6", "host_ip": "31.56.52.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-04 12:31:24 UTC", "discovered_at": "2026-10-04T12:31:24.000Z" }, { "id": 150588, "urlhaus_id": "3928523", "url": "http://115.57.244.183:37148/bin.sh", "host": "115.57.244.183", "host_ip": "115.57.244.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 12:31:17 UTC", "discovered_at": "2026-10-04T12:31:17.000Z" }, { "id": 150589, "urlhaus_id": "3928522", "url": "http://94.154.43.64/Binarys/Owari.mpsl", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:28:25 UTC", "discovered_at": "2026-10-04T12:28:25.000Z" }, { "id": 150595, "urlhaus_id": "3928521", "url": "http://94.154.43.64/Binarys/Owari.arm7", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:27 UTC", "discovered_at": "2026-10-04T12:27:27.000Z" }, { "id": 150594, "urlhaus_id": "3928520", "url": "http://94.154.43.64/Binarys/Owari.arm5", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:27 UTC", "discovered_at": "2026-10-04T12:27:27.000Z" }, { "id": 150593, "urlhaus_id": "3928519", "url": "http://94.154.43.64/Binarys/Owari.arm", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:27 UTC", "discovered_at": "2026-10-04T12:27:27.000Z" }, { "id": 150592, "urlhaus_id": "3928518", "url": "http://94.154.43.64/Binarys/Owari.x86", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:27 UTC", "discovered_at": "2026-10-04T12:27:27.000Z" }, { "id": 150591, "urlhaus_id": "3928517", "url": "http://94.154.43.64/Binarys/Owari.arm6", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:27 UTC", "discovered_at": "2026-10-04T12:27:27.000Z" }, { "id": 150590, "urlhaus_id": "3928516", "url": "http://94.154.43.64/Binarys/Owari.m68k", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:27 UTC", "discovered_at": "2026-10-04T12:27:27.000Z" }, { "id": 150597, "urlhaus_id": "3928515", "url": "http://94.154.43.64/Binarys/Owari.mips", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:20 UTC", "discovered_at": "2026-10-04T12:27:20.000Z" }, { "id": 150596, "urlhaus_id": "3928514", "url": "http://94.154.43.64/Binarys/Owari.sh4", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:20 UTC", "discovered_at": "2026-10-04T12:27:20.000Z" }, { "id": 150598, "urlhaus_id": "3928513", "url": "http://94.154.43.64/Binarys/Owari.ppc", "host": "94.154.43.64", "host_ip": "94.154.43.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 12:27:19 UTC", "discovered_at": "2026-10-04T12:27:19.000Z" }, { "id": 150599, "urlhaus_id": "3928512", "url": "http://154.248.173.59:55041/i", "host": "154.248.173.59", "host_ip": "154.248.173.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 12:17:17 UTC", "discovered_at": "2026-10-04T12:17:17.000Z" }, { "id": 150602, "urlhaus_id": "3928511", "url": "http://27.220.241.66:41824/bin.sh", "host": "27.220.241.66", "host_ip": "27.220.241.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 12:17:16 UTC", "discovered_at": "2026-10-04T12:17:16.000Z" }, { "id": 150601, "urlhaus_id": "3928510", "url": "http://61.52.159.237:58508/i", "host": "61.52.159.237", "host_ip": "61.52.159.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 12:17:16 UTC", "discovered_at": "2026-10-04T12:17:16.000Z" }, { "id": 150600, "urlhaus_id": "3928509", "url": "http://115.62.214.150:34361/bin.sh", "host": "115.62.214.150", "host_ip": "115.62.214.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 12:17:16 UTC", "discovered_at": "2026-10-04T12:17:16.000Z" }, { "id": 150603, "urlhaus_id": "3928508", "url": "https://wicresetconnect.com/download/WicResetConnect.exe", "host": "wicresetconnect.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "dropper, exe, rat", "last_online": null, "first_seen": "2026-10-04 12:15:25 UTC", "discovered_at": "2026-10-04T12:15:25.000Z" }, { "id": 150604, "urlhaus_id": "3928507", "url": "http://27.215.212.68:56602/bin.sh", "host": "27.215.212.68", "host_ip": "27.215.212.68", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, cowrie, elf, honeypot, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 12:14:35 UTC", "discovered_at": "2026-10-04T12:14:35.000Z" }, { "id": 150605, "urlhaus_id": "3928506", "url": "https://github.com/MineTeuw/Corz-client/raw/refs/heads/main/ledium-client-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 12:14:18 UTC", "discovered_at": "2026-10-04T12:14:18.000Z" }, { "id": 150606, "urlhaus_id": "3928505", "url": "https://upload.filehost.lol/KnGq1Rzde2ZwMW5RJT5q.png", "host": "upload.filehost.lol", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Rhadamanthys, ClickFix", "last_online": null, "first_seen": "2026-10-04 12:14:17 UTC", "discovered_at": "2026-10-04T12:14:17.000Z" }, { "id": 150607, "urlhaus_id": "3928504", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/Google.exe", "host": "github.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, exe", "last_online": null, "first_seen": "2026-10-04 12:14:16 UTC", "discovered_at": "2026-10-04T12:14:16.000Z" }, { "id": 150608, "urlhaus_id": "3928503", "url": "http://23.94.145.112/svvhost.exe", "host": "23.94.145.112", "host_ip": "23.94.145.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "DarkTortilla", "last_online": null, "first_seen": "2026-10-04 12:14:15 UTC", "discovered_at": "2026-10-04T12:14:15.000Z" }, { "id": 150609, "urlhaus_id": "3928502", "url": "https://upload.filehost.lol/qP7aC?9Z=L", "host": "upload.filehost.lol", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Rhadamanthys, ClickFix", "last_online": null, "first_seen": "2026-10-04 12:14:14 UTC", "discovered_at": "2026-10-04T12:14:14.000Z" }, { "id": 150610, "urlhaus_id": "3928501", "url": "https://104.193.195.143/Bin/support.ClientSetup.msi?e=Access", "host": "104.193.195.143", "host_ip": "104.193.195.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "connectwise, msi", "last_online": null, "first_seen": "2026-10-04 12:09:22 UTC", "discovered_at": "2026-10-04T12:09:22.000Z" }, { "id": 150611, "urlhaus_id": "3928500", "url": "http://163.142.94.86:50677/i", "host": "163.142.94.86", "host_ip": "163.142.94.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 12:05:29 UTC", "discovered_at": "2026-10-04T12:05:29.000Z" }, { "id": 150612, "urlhaus_id": "3928499", "url": "http://222.127.242.213:44063/i", "host": "222.127.242.213", "host_ip": "222.127.242.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 12:02:13 UTC", "discovered_at": "2026-10-04T12:02:13.000Z" }, { "id": 150613, "urlhaus_id": "3928498", "url": "http://176.65.139.201:8080/nyx_bot_linux_mipsle_packed", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, mirai", "last_online": null, "first_seen": "2026-10-04 11:49:26 UTC", "discovered_at": "2026-10-04T11:49:26.000Z" }, { "id": 150614, "urlhaus_id": "3928497", "url": "http://119.114.154.93:34836/i", "host": "119.114.154.93", "host_ip": "119.114.154.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 11:48:20 UTC", "discovered_at": "2026-10-04T11:48:20.000Z" }, { "id": 150615, "urlhaus_id": "3928496", "url": "http://103.111.23.12:36304/bin.sh", "host": "103.111.23.12", "host_ip": "103.111.23.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 11:47:28 UTC", "discovered_at": "2026-10-04T11:47:28.000Z" }, { "id": 150616, "urlhaus_id": "3928495", "url": "http://111.179.218.238:60664/i", "host": "111.179.218.238", "host_ip": "111.179.218.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 11:47:18 UTC", "discovered_at": "2026-10-04T11:47:18.000Z" }, { "id": 150617, "urlhaus_id": "3928494", "url": "http://42.239.255.6:34597/i", "host": "42.239.255.6", "host_ip": "42.239.255.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:47:16 UTC", "discovered_at": "2026-10-04T11:47:16.000Z" }, { "id": 150619, "urlhaus_id": "3928493", "url": "http://182.116.120.45:55146/i", "host": "182.116.120.45", "host_ip": "182.116.120.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:47:15 UTC", "discovered_at": "2026-10-04T11:47:15.000Z" }, { "id": 150618, "urlhaus_id": "3928492", "url": "http://182.116.120.45:55146/bin.sh", "host": "182.116.120.45", "host_ip": "182.116.120.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:47:15 UTC", "discovered_at": "2026-10-04T11:47:15.000Z" }, { "id": 150620, "urlhaus_id": "3928491", "url": "http://117.26.227.140:50457/i", "host": "117.26.227.140", "host_ip": "117.26.227.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 11:32:14 UTC", "discovered_at": "2026-10-04T11:32:14.000Z" }, { "id": 150621, "urlhaus_id": "3928490", "url": "http://45.168.132.19:37511/i", "host": "45.168.132.19", "host_ip": "45.168.132.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 11:31:17 UTC", "discovered_at": "2026-10-04T11:31:17.000Z" }, { "id": 150622, "urlhaus_id": "3928489", "url": "http://112.225.218.8:38471/bin.sh", "host": "112.225.218.8", "host_ip": "112.225.218.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 11:29:35 UTC", "discovered_at": "2026-10-04T11:29:35.000Z" }, { "id": 150623, "urlhaus_id": "3928488", "url": "http://61.54.253.190:51985/bin.sh", "host": "61.54.253.190", "host_ip": "61.54.253.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:17:12 UTC", "discovered_at": "2026-10-04T11:17:12.000Z" }, { "id": 150624, "urlhaus_id": "3928487", "url": "http://117.26.227.140:50457/bin.sh", "host": "117.26.227.140", "host_ip": "117.26.227.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 11:01:40 UTC", "discovered_at": "2026-10-04T11:01:40.000Z" }, { "id": 150626, "urlhaus_id": "3928486", "url": "http://182.121.146.13:36203/i", "host": "182.121.146.13", "host_ip": "182.121.146.13", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:01:35 UTC", "discovered_at": "2026-10-04T11:01:35.000Z" }, { "id": 150625, "urlhaus_id": "3928485", "url": "http://182.121.146.13:36203/bin.sh", "host": "182.121.146.13", "host_ip": "182.121.146.13", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:01:35 UTC", "discovered_at": "2026-10-04T11:01:35.000Z" }, { "id": 150627, "urlhaus_id": "3928484", "url": "http://182.124.23.70:52164/bin.sh", "host": "182.124.23.70", "host_ip": "182.124.23.70", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:01:34 UTC", "discovered_at": "2026-10-04T11:01:34.000Z" }, { "id": 150628, "urlhaus_id": "3928483", "url": "http://182.126.81.217:41612/bin.sh", "host": "182.126.81.217", "host_ip": "182.126.81.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 11:01:29 UTC", "discovered_at": "2026-10-04T11:01:29.000Z" }, { "id": 150630, "urlhaus_id": "3928482", "url": "http://221.15.144.165:40651/i", "host": "221.15.144.165", "host_ip": "221.15.144.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 10:47:12 UTC", "discovered_at": "2026-10-04T10:47:12.000Z" }, { "id": 150629, "urlhaus_id": "3928481", "url": "http://39.65.211.9:41473/i", "host": "39.65.211.9", "host_ip": "39.65.211.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 10:47:12 UTC", "discovered_at": "2026-10-04T10:47:12.000Z" }, { "id": 150631, "urlhaus_id": "3928480", "url": "http://115.56.128.124:35336/bin.sh", "host": "115.56.128.124", "host_ip": "115.56.128.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 10:36:20 UTC", "discovered_at": "2026-10-04T10:36:20.000Z" }, { "id": 150632, "urlhaus_id": "3928479", "url": "http://125.44.18.119:34090/i", "host": "125.44.18.119", "host_ip": "125.44.18.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 10:32:31 UTC", "discovered_at": "2026-10-04T10:32:31.000Z" }, { "id": 150633, "urlhaus_id": "3928478", "url": "http://112.116.92.153:48119/i", "host": "112.116.92.153", "host_ip": "112.116.92.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 10:32:15 UTC", "discovered_at": "2026-10-04T10:32:15.000Z" }, { "id": 150636, "urlhaus_id": "3928477", "url": "http://119.167.7.197:48851/bin.sh", "host": "119.167.7.197", "host_ip": "119.167.7.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 10:32:14 UTC", "discovered_at": "2026-10-04T10:32:14.000Z" }, { "id": 150635, "urlhaus_id": "3928476", "url": "http://123.190.19.174:35685/bin.sh", "host": "123.190.19.174", "host_ip": "123.190.19.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 10:32:14 UTC", "discovered_at": "2026-10-04T10:32:14.000Z" }, { "id": 150634, "urlhaus_id": "3928475", "url": "http://115.55.228.185:37165/i", "host": "115.55.228.185", "host_ip": "115.55.228.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 10:32:14 UTC", "discovered_at": "2026-10-04T10:32:14.000Z" }, { "id": 150637, "urlhaus_id": "3928474", "url": "http://42.227.202.105:44328/bin.sh", "host": "42.227.202.105", "host_ip": "42.227.202.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 10:17:15 UTC", "discovered_at": "2026-10-04T10:17:15.000Z" }, { "id": 150639, "urlhaus_id": "3928473", "url": "http://42.224.146.34:55637/i", "host": "42.224.146.34", "host_ip": "42.224.146.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 10:16:15 UTC", "discovered_at": "2026-10-04T10:16:15.000Z" }, { "id": 150638, "urlhaus_id": "3928472", "url": "http://123.148.212.69:55089/i", "host": "123.148.212.69", "host_ip": "123.148.212.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 10:16:15 UTC", "discovered_at": "2026-10-04T10:16:15.000Z" }, { "id": 150640, "urlhaus_id": "3928471", "url": "http://78.38.120.12:35789/i", "host": "78.38.120.12", "host_ip": "78.38.120.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 10:16:14 UTC", "discovered_at": "2026-10-04T10:16:14.000Z" }, { "id": 150641, "urlhaus_id": "3928470", "url": "http://42.224.150.162:40859/i", "host": "42.224.150.162", "host_ip": "42.224.150.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 10:02:12 UTC", "discovered_at": "2026-10-04T10:02:12.000Z" }, { "id": 150642, "urlhaus_id": "3928469", "url": "http://47.120.34.30:9118/linux", "host": "47.120.34.30", "host_ip": "47.120.34.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 10:00:32 UTC", "discovered_at": "2026-10-04T10:00:32.000Z" }, { "id": 150644, "urlhaus_id": "3928468", "url": "http://210.208.110.130:57862/bin.sh", "host": "210.208.110.130", "host_ip": "210.208.110.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 09:56:17 UTC", "discovered_at": "2026-10-04T09:56:17.000Z" }, { "id": 150643, "urlhaus_id": "3928467", "url": "http://118.96.45.141:41464/bin.sh", "host": "118.96.45.141", "host_ip": "118.96.45.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 09:56:17 UTC", "discovered_at": "2026-10-04T09:56:17.000Z" }, { "id": 150645, "urlhaus_id": "3928466", "url": "http://59.96.136.132:50699/i", "host": "59.96.136.132", "host_ip": "59.96.136.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 09:47:12 UTC", "discovered_at": "2026-10-04T09:47:12.000Z" }, { "id": 150647, "urlhaus_id": "3928465", "url": "http://87.68.237.92:42674/i", "host": "87.68.237.92", "host_ip": "87.68.237.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 09:47:11 UTC", "discovered_at": "2026-10-04T09:47:11.000Z" }, { "id": 150646, "urlhaus_id": "3928464", "url": "http://120.28.200.35:53916/i", "host": "120.28.200.35", "host_ip": "120.28.200.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 09:47:11 UTC", "discovered_at": "2026-10-04T09:47:11.000Z" }, { "id": 150649, "urlhaus_id": "3928463", "url": "http://182.112.45.184:42914/i", "host": "182.112.45.184", "host_ip": "182.112.45.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 09:32:11 UTC", "discovered_at": "2026-10-04T09:32:11.000Z" }, { "id": 150648, "urlhaus_id": "3928462", "url": "http://182.112.8.212:42073/i", "host": "182.112.8.212", "host_ip": "182.112.8.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 09:32:11 UTC", "discovered_at": "2026-10-04T09:32:11.000Z" }, { "id": 150654, "urlhaus_id": "3928461", "url": "http://175.165.82.123:52403/i", "host": "175.165.82.123", "host_ip": "175.165.82.123", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 09:17:15 UTC", "discovered_at": "2026-10-04T09:17:15.000Z" }, { "id": 150653, "urlhaus_id": "3928460", "url": "http://182.112.0.251:34447/i", "host": "182.112.0.251", "host_ip": "182.112.0.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 09:17:15 UTC", "discovered_at": "2026-10-04T09:17:15.000Z" }, { "id": 150652, "urlhaus_id": "3928459", "url": "http://182.112.8.212:42073/bin.sh", "host": "182.112.8.212", "host_ip": "182.112.8.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 09:17:15 UTC", "discovered_at": "2026-10-04T09:17:15.000Z" }, { "id": 150651, "urlhaus_id": "3928458", "url": "http://112.198.194.175:55553/bin.sh", "host": "112.198.194.175", "host_ip": "112.198.194.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 09:17:15 UTC", "discovered_at": "2026-10-04T09:17:15.000Z" }, { "id": 150650, "urlhaus_id": "3928457", "url": "http://119.102.38.237:56237/i", "host": "119.102.38.237", "host_ip": "119.102.38.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 09:17:15 UTC", "discovered_at": "2026-10-04T09:17:15.000Z" }, { "id": 150655, "urlhaus_id": "3928456", "url": "http://187.62.243.142:58586/i", "host": "187.62.243.142", "host_ip": "187.62.243.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 09:12:28 UTC", "discovered_at": "2026-10-04T09:12:28.000Z" }, { "id": 150656, "urlhaus_id": "3928455", "url": "http://91.92.242.236/files-129312398/files/file_9036ced938de2957.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-04 09:12:15 UTC", "discovered_at": "2026-10-04T09:12:15.000Z" }, { "id": 150657, "urlhaus_id": "3928454", "url": "http://119.102.38.237:56237/bin.sh", "host": "119.102.38.237", "host_ip": "119.102.38.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 09:02:19 UTC", "discovered_at": "2026-10-04T09:02:19.000Z" }, { "id": 150659, "urlhaus_id": "3928453", "url": "http://182.113.204.37:54180/i", "host": "182.113.204.37", "host_ip": "182.113.204.37", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 09:02:18 UTC", "discovered_at": "2026-10-04T09:02:18.000Z" }, { "id": 150658, "urlhaus_id": "3928452", "url": "http://182.112.45.184:42914/bin.sh", "host": "182.112.45.184", "host_ip": "182.112.45.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 09:02:18 UTC", "discovered_at": "2026-10-04T09:02:18.000Z" }, { "id": 150660, "urlhaus_id": "3928451", "url": "http://125.42.8.63:35061/bin.sh", "host": "125.42.8.63", "host_ip": "125.42.8.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 09:02:17 UTC", "discovered_at": "2026-10-04T09:02:17.000Z" }, { "id": 150661, "urlhaus_id": "3928450", "url": "http://210.208.111.74:53410/i", "host": "210.208.111.74", "host_ip": "210.208.111.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 08:47:11 UTC", "discovered_at": "2026-10-04T08:47:11.000Z" }, { "id": 150664, "urlhaus_id": "3928449", "url": "http://175.165.87.250:52403/i", "host": "175.165.87.250", "host_ip": "175.165.87.250", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 08:47:10 UTC", "discovered_at": "2026-10-04T08:47:10.000Z" }, { "id": 150663, "urlhaus_id": "3928448", "url": "http://202.166.165.60:53927/i", "host": "202.166.165.60", "host_ip": "202.166.165.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 08:47:10 UTC", "discovered_at": "2026-10-04T08:47:10.000Z" }, { "id": 150662, "urlhaus_id": "3928447", "url": "http://42.234.140.194:35074/bin.sh", "host": "42.234.140.194", "host_ip": "42.234.140.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 08:47:10 UTC", "discovered_at": "2026-10-04T08:47:10.000Z" }, { "id": 150665, "urlhaus_id": "3928446", "url": "http://176.65.139.36/eclipse.armv7l", "host": "176.65.139.36", "host_ip": "176.65.139.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai", "last_online": null, "first_seen": "2026-10-04 08:44:27 UTC", "discovered_at": "2026-10-04T08:44:27.000Z" }, { "id": 150666, "urlhaus_id": "3928445", "url": "http://221.214.181.197:10579/i", "host": "221.214.181.197", "host_ip": "221.214.181.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 08:35:22 UTC", "discovered_at": "2026-10-04T08:35:22.000Z" }, { "id": 150668, "urlhaus_id": "3928444", "url": "http://182.52.28.20:51224/i", "host": "182.52.28.20", "host_ip": "182.52.28.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 08:32:16 UTC", "discovered_at": "2026-10-04T08:32:16.000Z" }, { "id": 150667, "urlhaus_id": "3928443", "url": "http://61.168.141.86:47638/i", "host": "61.168.141.86", "host_ip": "61.168.141.86", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 08:32:16 UTC", "discovered_at": "2026-10-04T08:32:16.000Z" }, { "id": 150669, "urlhaus_id": "3928442", "url": "http://196.190.69.149:48159/bin.sh", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 08:32:15 UTC", "discovered_at": "2026-10-04T08:32:15.000Z" }, { "id": 150670, "urlhaus_id": "3928441", "url": "http://114.198.242.174:60567/i", "host": "114.198.242.174", "host_ip": "114.198.242.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 08:22:22 UTC", "discovered_at": "2026-10-04T08:22:22.000Z" }, { "id": 150671, "urlhaus_id": "3928440", "url": "http://219.155.194.71:35019/i", "host": "219.155.194.71", "host_ip": "219.155.194.71", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 08:19:21 UTC", "discovered_at": "2026-10-04T08:19:21.000Z" }, { "id": 150672, "urlhaus_id": "3928439", "url": "http://210.208.110.221:40435/i", "host": "210.208.110.221", "host_ip": "210.208.110.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 08:17:41 UTC", "discovered_at": "2026-10-04T08:17:41.000Z" }, { "id": 150673, "urlhaus_id": "3928438", "url": "http://186.149.204.12:45403/bin.sh", "host": "186.149.204.12", "host_ip": "186.149.204.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 08:17:15 UTC", "discovered_at": "2026-10-04T08:17:15.000Z" }, { "id": 150675, "urlhaus_id": "3928437", "url": "http://59.96.140.102:58570/i", "host": "59.96.140.102", "host_ip": "59.96.140.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 08:17:13 UTC", "discovered_at": "2026-10-04T08:17:13.000Z" }, { "id": 150674, "urlhaus_id": "3928436", "url": "http://175.10.25.77:48436/bin.sh", "host": "175.10.25.77", "host_ip": "175.10.25.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 08:17:13 UTC", "discovered_at": "2026-10-04T08:17:13.000Z" }, { "id": 150676, "urlhaus_id": "3928435", "url": "http://221.214.181.197:10579/bin.sh", "host": "221.214.181.197", "host_ip": "221.214.181.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 08:06:14 UTC", "discovered_at": "2026-10-04T08:06:14.000Z" }, { "id": 150677, "urlhaus_id": "3928434", "url": "http://125.41.2.124:60421/i", "host": "125.41.2.124", "host_ip": "125.41.2.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 08:01:25 UTC", "discovered_at": "2026-10-04T08:01:25.000Z" }, { "id": 150679, "urlhaus_id": "3928433", "url": "http://222.127.73.23:52135/i", "host": "222.127.73.23", "host_ip": "222.127.73.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 08:01:13 UTC", "discovered_at": "2026-10-04T08:01:13.000Z" }, { "id": 150678, "urlhaus_id": "3928432", "url": "http://120.28.215.116:57223/i", "host": "120.28.215.116", "host_ip": "120.28.215.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 08:01:13 UTC", "discovered_at": "2026-10-04T08:01:13.000Z" }, { "id": 150681, "urlhaus_id": "3928431", "url": "http://117.242.152.165:43058/i", "host": "117.242.152.165", "host_ip": "117.242.152.165", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 07:47:14 UTC", "discovered_at": "2026-10-04T07:47:14.000Z" }, { "id": 150680, "urlhaus_id": "3928430", "url": "http://175.173.82.102:52403/i", "host": "175.173.82.102", "host_ip": "175.173.82.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:47:14 UTC", "discovered_at": "2026-10-04T07:47:14.000Z" }, { "id": 150682, "urlhaus_id": "3928429", "url": "http://42.224.92.100:41244/bin.sh", "host": "42.224.92.100", "host_ip": "42.224.92.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 07:35:19 UTC", "discovered_at": "2026-10-04T07:35:19.000Z" }, { "id": 150683, "urlhaus_id": "3928428", "url": "http://42.236.222.141:55168/i", "host": "42.236.222.141", "host_ip": "42.236.222.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 07:31:15 UTC", "discovered_at": "2026-10-04T07:31:15.000Z" }, { "id": 150685, "urlhaus_id": "3928427", "url": "http://42.85.175.38:37470/bin.sh", "host": "42.85.175.38", "host_ip": "42.85.175.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:31:14 UTC", "discovered_at": "2026-10-04T07:31:14.000Z" }, { "id": 150684, "urlhaus_id": "3928426", "url": "http://219.157.34.76:60173/i", "host": "219.157.34.76", "host_ip": "219.157.34.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 07:31:14 UTC", "discovered_at": "2026-10-04T07:31:14.000Z" }, { "id": 150688, "urlhaus_id": "3928425", "url": "http://143.20.154.42/bins/bot.mpsl", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:20:17 UTC", "discovered_at": "2026-10-04T07:20:17.000Z" }, { "id": 150687, "urlhaus_id": "3928424", "url": "http://143.20.154.42/bins/bot.spc", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:20:17 UTC", "discovered_at": "2026-10-04T07:20:17.000Z" }, { "id": 150686, "urlhaus_id": "3928423", "url": "http://143.20.154.42/bins/bot.x86", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:20:17 UTC", "discovered_at": "2026-10-04T07:20:17.000Z" }, { "id": 150690, "urlhaus_id": "3928422", "url": "http://143.20.154.42/bins/bot.ppc", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:19:19 UTC", "discovered_at": "2026-10-04T07:19:19.000Z" }, { "id": 150689, "urlhaus_id": "3928421", "url": "http://143.20.154.42/bins/bot.sh4", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:19:19 UTC", "discovered_at": "2026-10-04T07:19:19.000Z" }, { "id": 150693, "urlhaus_id": "3928420", "url": "http://143.20.154.42/bins/bot.msl", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:19:17 UTC", "discovered_at": "2026-10-04T07:19:17.000Z" }, { "id": 150692, "urlhaus_id": "3928419", "url": "http://143.20.154.42/bins/bot.mis", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:19:17 UTC", "discovered_at": "2026-10-04T07:19:17.000Z" }, { "id": 150691, "urlhaus_id": "3928418", "url": "http://143.20.154.42/bins/bot.arm", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:19:17 UTC", "discovered_at": "2026-10-04T07:19:17.000Z" }, { "id": 150695, "urlhaus_id": "3928417", "url": "http://115.61.143.8:34621/i", "host": "115.61.143.8", "host_ip": "115.61.143.8", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 07:17:16 UTC", "discovered_at": "2026-10-04T07:17:16.000Z" }, { "id": 150694, "urlhaus_id": "3928416", "url": "http://175.10.25.77:48436/i", "host": "175.10.25.77", "host_ip": "175.10.25.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 07:17:16 UTC", "discovered_at": "2026-10-04T07:17:16.000Z" }, { "id": 150697, "urlhaus_id": "3928415", "url": "http://115.57.254.86:47288/bin.sh", "host": "115.57.254.86", "host_ip": "115.57.254.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 07:17:15 UTC", "discovered_at": "2026-10-04T07:17:15.000Z" }, { "id": 150696, "urlhaus_id": "3928414", "url": "http://115.55.232.243:37993/bin.sh", "host": "115.55.232.243", "host_ip": "115.55.232.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 07:17:15 UTC", "discovered_at": "2026-10-04T07:17:15.000Z" }, { "id": 150698, "urlhaus_id": "3928413", "url": "http://217.154.79.223:5402/payload.bin", "host": "217.154.79.223", "host_ip": "217.154.79.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:17:00 UTC", "discovered_at": "2026-10-04T07:17:00.000Z" }, { "id": 150699, "urlhaus_id": "3928412", "url": "http://123.190.16.227:51354/i", "host": "123.190.16.227", "host_ip": "123.190.16.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:15:28 UTC", "discovered_at": "2026-10-04T07:15:28.000Z" }, { "id": 150700, "urlhaus_id": "3928411", "url": "http://43.134.2.126:18080/payload.bin", "host": "43.134.2.126", "host_ip": "43.134.2.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:15:26 UTC", "discovered_at": "2026-10-04T07:15:26.000Z" }, { "id": 150702, "urlhaus_id": "3928410", "url": "http://maxxlavalink.cyou/x86_64", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:15:17 UTC", "discovered_at": "2026-10-04T07:15:17.000Z" }, { "id": 150701, "urlhaus_id": "3928409", "url": "http://107.152.37.81:8080/payload.hta", "host": "107.152.37.81", "host_ip": "107.152.37.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:15:17 UTC", "discovered_at": "2026-10-04T07:15:17.000Z" }, { "id": 150704, "urlhaus_id": "3928408", "url": "http://60.23.235.151:34355/i", "host": "60.23.235.151", "host_ip": "60.23.235.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 07:15:16 UTC", "discovered_at": "2026-10-04T07:15:16.000Z" }, { "id": 150703, "urlhaus_id": "3928407", "url": "http://120.28.214.81:59736/i", "host": "120.28.214.81", "host_ip": "120.28.214.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 07:15:16 UTC", "discovered_at": "2026-10-04T07:15:16.000Z" }, { "id": 150706, "urlhaus_id": "3928406", "url": "http://64.89.163.224:8089/main_arm64", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 07:15:15 UTC", "discovered_at": "2026-10-04T07:15:15.000Z" }, { "id": 150705, "urlhaus_id": "3928405", "url": "http://92.243.113.232:16844/i", "host": "92.243.113.232", "host_ip": "92.243.113.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:15:15 UTC", "discovered_at": "2026-10-04T07:15:15.000Z" }, { "id": 150708, "urlhaus_id": "3928404", "url": "http://209.141.43.95:8081/km-payload.sh", "host": "209.141.43.95", "host_ip": "209.141.43.95", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 07:15:14 UTC", "discovered_at": "2026-10-04T07:15:14.000Z" }, { "id": 150707, "urlhaus_id": "3928403", "url": "http://209.141.43.95:8081/full-payload.sh", "host": "209.141.43.95", "host_ip": "209.141.43.95", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "script", "last_online": null, "first_seen": "2026-10-04 07:15:14 UTC", "discovered_at": "2026-10-04T07:15:14.000Z" }, { "id": 150722, "urlhaus_id": "3928402", "url": "http://176.65.139.166/iran.sparc", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150721, "urlhaus_id": "3928401", "url": "http://176.65.139.166/iran.m68k", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150720, "urlhaus_id": "3928400", "url": "http://176.65.139.166/iran.armv7l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150719, "urlhaus_id": "3928399", "url": "http://176.65.139.166/iran.arc", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150718, "urlhaus_id": "3928398", "url": "http://176.65.139.166/iran.armv4l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150717, "urlhaus_id": "3928397", "url": "http://176.65.139.166/iran.aarch64", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150716, "urlhaus_id": "3928396", "url": "http://176.65.139.166/iran.sh4", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150715, "urlhaus_id": "3928395", "url": "http://176.65.139.166/iran.mips", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150714, "urlhaus_id": "3928394", "url": "http://176.65.139.166/iran.armv6l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150713, "urlhaus_id": "3928393", "url": "http://176.65.139.166/iran.mipsel", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150712, "urlhaus_id": "3928392", "url": "http://176.65.139.166/iran.i486", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150711, "urlhaus_id": "3928391", "url": "http://176.65.139.166/iran.powerpc", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150710, "urlhaus_id": "3928390", "url": "http://176.65.139.166/iran.x86_64", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150709, "urlhaus_id": "3928389", "url": "http://176.65.139.166/iran.armv5l", "host": "176.65.139.166", "host_ip": "176.65.139.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 07:15:13 UTC", "discovered_at": "2026-10-04T07:15:13.000Z" }, { "id": 150724, "urlhaus_id": "3928388", "url": "http://64.89.163.224:8089/cnc", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:45 UTC", "discovered_at": "2026-10-04T06:59:45.000Z" }, { "id": 150723, "urlhaus_id": "3928387", "url": "http://maxxlavalink.cyou/mipsel", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CoinMiner", "last_online": null, "first_seen": "2026-10-04 06:59:45 UTC", "discovered_at": "2026-10-04T06:59:45.000Z" }, { "id": 150725, "urlhaus_id": "3928386", "url": "http://maxxlavalink.cyou/ppc64", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:44 UTC", "discovered_at": "2026-10-04T06:59:44.000Z" }, { "id": 150735, "urlhaus_id": "3928385", "url": "http://185.213.240.64/bins.sh", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150734, "urlhaus_id": "3928384", "url": "http://94.103.188.19:8888/evil_arm.so", "host": "94.103.188.19", "host_ip": "94.103.188.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150733, "urlhaus_id": "3928383", "url": "http://likedrink.beer/bins/mirai.xtensa", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150732, "urlhaus_id": "3928382", "url": "http://likedrink.beer/bins/mirai.rv64", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150731, "urlhaus_id": "3928381", "url": "http://168.93.199.51:8080/rau_rce.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150730, "urlhaus_id": "3928380", "url": "http://168.93.199.51:8080/mixed_injected.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150729, "urlhaus_id": "3928379", "url": "http://likedrink.beer/bins/mirai.arm5", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150728, "urlhaus_id": "3928378", "url": "http://maxxlavalink.cyou/bins/main_m68k", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150727, "urlhaus_id": "3928377", "url": "http://maxxlavalink.cyou/bins/main_ppc", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150726, "urlhaus_id": "3928376", "url": "http://168.93.199.51:8080/mixed_find.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:43 UTC", "discovered_at": "2026-10-04T06:59:43.000Z" }, { "id": 150738, "urlhaus_id": "3928375", "url": "http://maxxlavalink.cyou/bins/main_arm", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:42 UTC", "discovered_at": "2026-10-04T06:59:42.000Z" }, { "id": 150737, "urlhaus_id": "3928374", "url": "http://likedrink.beer/bins/mirai.mipsl32", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:42 UTC", "discovered_at": "2026-10-04T06:59:42.000Z" }, { "id": 150736, "urlhaus_id": "3928373", "url": "http://likedrink.beer/bins/mirai.arm7", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:42 UTC", "discovered_at": "2026-10-04T06:59:42.000Z" }, { "id": 150745, "urlhaus_id": "3928372", "url": "http://64.89.163.224:8089/main_x86_64", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:41 UTC", "discovered_at": "2026-10-04T06:59:41.000Z" }, { "id": 150744, "urlhaus_id": "3928371", "url": "http://64.89.163.224:8089/main_x86", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:41 UTC", "discovered_at": "2026-10-04T06:59:41.000Z" }, { "id": 150743, "urlhaus_id": "3928370", "url": "http://maxxlavalink.cyou/armv7l", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:41 UTC", "discovered_at": "2026-10-04T06:59:41.000Z" }, { "id": 150742, "urlhaus_id": "3928369", "url": "http://64.89.163.224:8089/x86", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:41 UTC", "discovered_at": "2026-10-04T06:59:41.000Z" }, { "id": 150741, "urlhaus_id": "3928368", "url": "http://maxxlavalink.cyou/bins/main_mpsl", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:41 UTC", "discovered_at": "2026-10-04T06:59:41.000Z" }, { "id": 150740, "urlhaus_id": "3928367", "url": "http://64.89.163.224:8089/main_mipsel", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:41 UTC", "discovered_at": "2026-10-04T06:59:41.000Z" }, { "id": 150739, "urlhaus_id": "3928366", "url": "http://185.130.46.76:8000/bot.mips", "host": "185.130.46.76", "host_ip": "185.130.46.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:41 UTC", "discovered_at": "2026-10-04T06:59:41.000Z" }, { "id": 150749, "urlhaus_id": "3928365", "url": "http://64.89.163.224:8089/botbin", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:40 UTC", "discovered_at": "2026-10-04T06:59:40.000Z" }, { "id": 150748, "urlhaus_id": "3928364", "url": "http://likedrink.beer/bins/mirai.arm8", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:40 UTC", "discovered_at": "2026-10-04T06:59:40.000Z" }, { "id": 150747, "urlhaus_id": "3928363", "url": "http://64.89.163.224:8089/arm64", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:40 UTC", "discovered_at": "2026-10-04T06:59:40.000Z" }, { "id": 150746, "urlhaus_id": "3928362", "url": "http://64.89.163.224:8089/mips", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:40 UTC", "discovered_at": "2026-10-04T06:59:40.000Z" }, { "id": 150752, "urlhaus_id": "3928361", "url": "http://maxxlavalink.cyou/bins/main_x86%20%28deleted%29", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:39 UTC", "discovered_at": "2026-10-04T06:59:39.000Z" }, { "id": 150751, "urlhaus_id": "3928360", "url": "http://likedrink.beer/bins/mirai.mips64", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:39 UTC", "discovered_at": "2026-10-04T06:59:39.000Z" }, { "id": 150750, "urlhaus_id": "3928359", "url": "http://64.89.163.224:8089/x86_64", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:39 UTC", "discovered_at": "2026-10-04T06:59:39.000Z" }, { "id": 150754, "urlhaus_id": "3928358", "url": "http://likedrink.beer/bins/mirai.sparcv8", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:38 UTC", "discovered_at": "2026-10-04T06:59:38.000Z" }, { "id": 150753, "urlhaus_id": "3928357", "url": "http://likedrink.beer/bins/mirai.sh4", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:38 UTC", "discovered_at": "2026-10-04T06:59:38.000Z" }, { "id": 150756, "urlhaus_id": "3928356", "url": "http://maxxlavalink.cyou/bins/main_x86_64", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:37 UTC", "discovered_at": "2026-10-04T06:59:37.000Z" }, { "id": 150755, "urlhaus_id": "3928355", "url": "http://likedrink.beer/bins/mirai.mblzb", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:37 UTC", "discovered_at": "2026-10-04T06:59:37.000Z" }, { "id": 150760, "urlhaus_id": "3928354", "url": "http://168.93.199.51:8080/WriteShell64.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:36 UTC", "discovered_at": "2026-10-04T06:59:36.000Z" }, { "id": 150759, "urlhaus_id": "3928353", "url": "http://43.155.203.106:8899/loader.ps1", "host": "43.155.203.106", "host_ip": "43.155.203.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ps1, script", "last_online": null, "first_seen": "2026-10-04 06:59:36 UTC", "discovered_at": "2026-10-04T06:59:36.000Z" }, { "id": 150758, "urlhaus_id": "3928352", "url": "http://43.155.203.106:8899/payload.bin.bak-20260928-164739", "host": "43.155.203.106", "host_ip": "43.155.203.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:36 UTC", "discovered_at": "2026-10-04T06:59:36.000Z" }, { "id": 150757, "urlhaus_id": "3928351", "url": "http://maxxlavalink.cyou/mips", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "CoinMiner", "last_online": null, "first_seen": "2026-10-04 06:59:36 UTC", "discovered_at": "2026-10-04T06:59:36.000Z" }, { "id": 150766, "urlhaus_id": "3928350", "url": "http://185.130.46.76:8000/bot.x86", "host": "185.130.46.76", "host_ip": "185.130.46.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:35 UTC", "discovered_at": "2026-10-04T06:59:35.000Z" }, { "id": 150765, "urlhaus_id": "3928349", "url": "http://168.93.199.51:8080/WhoamiThrow.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:35 UTC", "discovered_at": "2026-10-04T06:59:35.000Z" }, { "id": 150764, "urlhaus_id": "3928348", "url": "http://185.130.46.76:8000/bot.arm", "host": "185.130.46.76", "host_ip": "185.130.46.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:35 UTC", "discovered_at": "2026-10-04T06:59:35.000Z" }, { "id": 150763, "urlhaus_id": "3928347", "url": "http://likedrink.beer/bins/mirai.s390x", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:35 UTC", "discovered_at": "2026-10-04T06:59:35.000Z" }, { "id": 150762, "urlhaus_id": "3928346", "url": "http://94.103.188.19:8888/evil_mips.so", "host": "94.103.188.19", "host_ip": "94.103.188.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:35 UTC", "discovered_at": "2026-10-04T06:59:35.000Z" }, { "id": 150761, "urlhaus_id": "3928345", "url": "http://likedrink.beer/bins/mirai.ppc64e5", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:35 UTC", "discovered_at": "2026-10-04T06:59:35.000Z" }, { "id": 150768, "urlhaus_id": "3928344", "url": "http://45.153.34.212:8181/.dcplm", "host": "45.153.34.212", "host_ip": "45.153.34.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "honeypot, ssh", "last_online": null, "first_seen": "2026-10-04 06:59:34 UTC", "discovered_at": "2026-10-04T06:59:34.000Z" }, { "id": 150767, "urlhaus_id": "3928343", "url": "http://168.93.199.51:8080/w.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:34 UTC", "discovered_at": "2026-10-04T06:59:34.000Z" }, { "id": 150773, "urlhaus_id": "3928342", "url": "http://168.93.199.51:8080/WriteShellInstaller.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:33 UTC", "discovered_at": "2026-10-04T06:59:33.000Z" }, { "id": 150772, "urlhaus_id": "3928341", "url": "http://likedrink.beer/bins/mirai.mipsl64r6", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:33 UTC", "discovered_at": "2026-10-04T06:59:33.000Z" }, { "id": 150771, "urlhaus_id": "3928340", "url": "http://likedrink.beer/bins/mirai.mipsl64", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:33 UTC", "discovered_at": "2026-10-04T06:59:33.000Z" }, { "id": 150770, "urlhaus_id": "3928339", "url": "http://likedrink.beer/bins/mirai.m68k", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:33 UTC", "discovered_at": "2026-10-04T06:59:33.000Z" }, { "id": 150769, "urlhaus_id": "3928338", "url": "http://168.93.199.51:8080/mf2.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:33 UTC", "discovered_at": "2026-10-04T06:59:33.000Z" }, { "id": 150779, "urlhaus_id": "3928337", "url": "http://168.93.199.51:8080/FindRootThrow94803.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:32 UTC", "discovered_at": "2026-10-04T06:59:32.000Z" }, { "id": 150778, "urlhaus_id": "3928336", "url": "http://168.93.199.51:8080/payload.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:32 UTC", "discovered_at": "2026-10-04T06:59:32.000Z" }, { "id": 150777, "urlhaus_id": "3928335", "url": "http://64.89.163.224:8089/main_arm5", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:32 UTC", "discovered_at": "2026-10-04T06:59:32.000Z" }, { "id": 150776, "urlhaus_id": "3928334", "url": "http://64.89.163.224:8089/sh4", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:32 UTC", "discovered_at": "2026-10-04T06:59:32.000Z" }, { "id": 150775, "urlhaus_id": "3928333", "url": "http://64.89.163.224:8089/main_arm", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:32 UTC", "discovered_at": "2026-10-04T06:59:32.000Z" }, { "id": 150774, "urlhaus_id": "3928332", "url": "http://64.89.163.224:8089/main_arm6", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:32 UTC", "discovered_at": "2026-10-04T06:59:32.000Z" }, { "id": 150782, "urlhaus_id": "3928331", "url": "http://64.89.163.224:8089/main_sh4", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:31 UTC", "discovered_at": "2026-10-04T06:59:31.000Z" }, { "id": 150781, "urlhaus_id": "3928330", "url": "http://64.89.163.224:8089/arm5", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:31 UTC", "discovered_at": "2026-10-04T06:59:31.000Z" }, { "id": 150780, "urlhaus_id": "3928329", "url": "http://64.89.163.224:8089/m68k", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:31 UTC", "discovered_at": "2026-10-04T06:59:31.000Z" }, { "id": 150784, "urlhaus_id": "3928328", "url": "http://maxxlavalink.cyou/x86", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:30 UTC", "discovered_at": "2026-10-04T06:59:30.000Z" }, { "id": 150783, "urlhaus_id": "3928327", "url": "http://maxxlavalink.cyou/aarch64", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:30 UTC", "discovered_at": "2026-10-04T06:59:30.000Z" }, { "id": 150787, "urlhaus_id": "3928326", "url": "http://192.82.67.94/payload.txt", "host": "192.82.67.94", "host_ip": "192.82.67.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:29 UTC", "discovered_at": "2026-10-04T06:59:29.000Z" }, { "id": 150786, "urlhaus_id": "3928325", "url": "http://192.82.67.94/GodPotato-NET4.exe", "host": "192.82.67.94", "host_ip": "192.82.67.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:29 UTC", "discovered_at": "2026-10-04T06:59:29.000Z" }, { "id": 150785, "urlhaus_id": "3928324", "url": "http://64.89.163.224:8089/arm7", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:29 UTC", "discovered_at": "2026-10-04T06:59:29.000Z" }, { "id": 150788, "urlhaus_id": "3928323", "url": "http://likedrink.beer/bins/mirai.ppc64lp8", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:28 UTC", "discovered_at": "2026-10-04T06:59:28.000Z" }, { "id": 150793, "urlhaus_id": "3928322", "url": "http://168.93.199.51:8080/mf.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:25 UTC", "discovered_at": "2026-10-04T06:59:25.000Z" }, { "id": 150792, "urlhaus_id": "3928321", "url": "http://168.93.199.51:8080/mixed_md.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:25 UTC", "discovered_at": "2026-10-04T06:59:25.000Z" }, { "id": 150791, "urlhaus_id": "3928320", "url": "http://185.130.46.76:8000/bot.aarch64", "host": "185.130.46.76", "host_ip": "185.130.46.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:25 UTC", "discovered_at": "2026-10-04T06:59:25.000Z" }, { "id": 150790, "urlhaus_id": "3928319", "url": "http://168.93.199.51:8080/tiny.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:25 UTC", "discovered_at": "2026-10-04T06:59:25.000Z" }, { "id": 150789, "urlhaus_id": "3928318", "url": "http://168.93.199.51:8080/mixed_md64.dll", "host": "168.93.199.51", "host_ip": "168.93.199.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:25 UTC", "discovered_at": "2026-10-04T06:59:25.000Z" }, { "id": 150804, "urlhaus_id": "3928317", "url": "http://maxxlavalink.cyou/bins/main_arm5", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150803, "urlhaus_id": "3928316", "url": "http://maxxlavalink.cyou/bins/main_arm7", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150802, "urlhaus_id": "3928315", "url": "http://43.155.203.106:8899/payload.bin", "host": "43.155.203.106", "host_ip": "43.155.203.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150801, "urlhaus_id": "3928314", "url": "http://maxxlavalink.cyou/bins/main_mips", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150800, "urlhaus_id": "3928313", "url": "http://maxxlavalink.cyou/bins/main_arm6", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150799, "urlhaus_id": "3928312", "url": "http://64.89.163.224:8089/ppc", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150798, "urlhaus_id": "3928311", "url": "http://64.89.163.224:8089/main_ppc", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150797, "urlhaus_id": "3928310", "url": "http://64.89.163.224:8089/main_arm7", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150796, "urlhaus_id": "3928309", "url": "http://64.89.163.224:8089/main_spc", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150795, "urlhaus_id": "3928308", "url": "http://likedrink.beer/bins/mirai.sparc64", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150794, "urlhaus_id": "3928307", "url": "http://64.89.163.224:8089/main_host", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:24 UTC", "discovered_at": "2026-10-04T06:59:24.000Z" }, { "id": 150816, "urlhaus_id": "3928306", "url": "http://64.89.163.224:8089/mipsel", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150815, "urlhaus_id": "3928305", "url": "http://64.89.163.224:8089/main_mips", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150814, "urlhaus_id": "3928304", "url": "http://64.89.163.224:8089/arm", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150813, "urlhaus_id": "3928303", "url": "http://64.89.163.224:8089/main_m68k", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150812, "urlhaus_id": "3928302", "url": "http://maxxlavalink.cyou/bins/main_sh4", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150811, "urlhaus_id": "3928301", "url": "http://64.89.163.224:8089/spc", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150810, "urlhaus_id": "3928300", "url": "http://64.89.163.224:8089/arm6", "host": "64.89.163.224", "host_ip": "64.89.163.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150809, "urlhaus_id": "3928299", "url": "http://likedrink.beer/bins/mirai.mblz", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150808, "urlhaus_id": "3928298", "url": "http://likedrink.beer/bins/mirai.x86", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150807, "urlhaus_id": "3928297", "url": "http://likedrink.beer/bins/mirai.sh4b", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150806, "urlhaus_id": "3928296", "url": "http://likedrink.beer/bins/mirai.armb7", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150805, "urlhaus_id": "3928295", "url": "http://likedrink.beer/bins/mirai.mips32", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:23 UTC", "discovered_at": "2026-10-04T06:59:23.000Z" }, { "id": 150822, "urlhaus_id": "3928294", "url": "http://143.20.154.42/bins/bot.arm8", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:59:22 UTC", "discovered_at": "2026-10-04T06:59:22.000Z" }, { "id": 150821, "urlhaus_id": "3928293", "url": "http://likedrink.beer/bins/mirai.rv32", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:22 UTC", "discovered_at": "2026-10-04T06:59:22.000Z" }, { "id": 150820, "urlhaus_id": "3928292", "url": "http://likedrink.beer/bins/mirai.ppce5", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:22 UTC", "discovered_at": "2026-10-04T06:59:22.000Z" }, { "id": 150819, "urlhaus_id": "3928291", "url": "http://likedrink.beer/bins/mirai.mipsl32r6", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:22 UTC", "discovered_at": "2026-10-04T06:59:22.000Z" }, { "id": 150818, "urlhaus_id": "3928290", "url": "http://likedrink.beer/bins/mirai.x86_64", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:22 UTC", "discovered_at": "2026-10-04T06:59:22.000Z" }, { "id": 150817, "urlhaus_id": "3928289", "url": "http://likedrink.beer/bins/mirai.armb8", "host": "likedrink.beer", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:59:22 UTC", "discovered_at": "2026-10-04T06:59:22.000Z" }, { "id": 150823, "urlhaus_id": "3928288", "url": "http://maxxlavalink.cyou/run.sh", "host": "maxxlavalink.cyou", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "script", "last_online": null, "first_seen": "2026-10-04 06:59:21 UTC", "discovered_at": "2026-10-04T06:59:21.000Z" }, { "id": 150825, "urlhaus_id": "3928287", "url": "https://wwwiiisss.oss-ap-northeast-1.aliyuncs.com/SogouExplorer21_windows.zip", "host": "wwwiiisss.oss-ap-northeast-1.aliyuncs.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:59:06 UTC", "discovered_at": "2026-10-04T06:59:06.000Z" }, { "id": 150824, "urlhaus_id": "3928286", "url": "https://sogo-download.oss-cn-hongkong.aliyuncs.com/sougouExpiorerr_Setup_x64.zip", "host": "sogo-download.oss-cn-hongkong.aliyuncs.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilverFox, ValleyRAT", "last_online": null, "first_seen": "2026-10-04 06:59:06 UTC", "discovered_at": "2026-10-04T06:59:06.000Z" }, { "id": 150827, "urlhaus_id": "3928285", "url": "http://105.186.111.168:49221/Mozi.a", "host": "105.186.111.168", "host_ip": "105.186.111.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:58:22 UTC", "discovered_at": "2026-10-04T06:58:22.000Z" }, { "id": 150826, "urlhaus_id": "3928284", "url": "http://182.127.179.138:47237/Mozi.m", "host": "182.127.179.138", "host_ip": "182.127.179.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:58:22 UTC", "discovered_at": "2026-10-04T06:58:22.000Z" }, { "id": 150828, "urlhaus_id": "3928283", "url": "https://maverick174.org/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "host": "maverick174.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "connectwise, screenconnect", "last_online": null, "first_seen": "2026-10-04 06:58:20 UTC", "discovered_at": "2026-10-04T06:58:20.000Z" }, { "id": 150830, "urlhaus_id": "3928282", "url": "https://moneylord.org/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "host": "moneylord.org", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "connectwise, screenconnect", "last_online": null, "first_seen": "2026-10-04 06:58:19 UTC", "discovered_at": "2026-10-04T06:58:19.000Z" }, { "id": 150829, "urlhaus_id": "3928281", "url": "https://raw.githubusercontent.com/snipezcyka091111/Krypton-updated-crack/refs/heads/main/Krypton_crack-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 06:58:19 UTC", "discovered_at": "2026-10-04T06:58:19.000Z" }, { "id": 150832, "urlhaus_id": "3928280", "url": "http://143.20.154.42/bins/w.sh", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:18 UTC", "discovered_at": "2026-10-04T06:58:18.000Z" }, { "id": 150831, "urlhaus_id": "3928279", "url": "http://143.20.154.42/bins/c.sh", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:18 UTC", "discovered_at": "2026-10-04T06:58:18.000Z" }, { "id": 150833, "urlhaus_id": "3928278", "url": "http://180.245.42.218:56938/bin.sh", "host": "180.245.42.218", "host_ip": "180.245.42.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:17 UTC", "discovered_at": "2026-10-04T06:58:17.000Z" }, { "id": 150837, "urlhaus_id": "3928277", "url": "http://143.20.154.42/bins/bot.arm5", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:16 UTC", "discovered_at": "2026-10-04T06:58:16.000Z" }, { "id": 150836, "urlhaus_id": "3928276", "url": "http://143.20.154.42/bins/bot.arm6", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:16 UTC", "discovered_at": "2026-10-04T06:58:16.000Z" }, { "id": 150835, "urlhaus_id": "3928275", "url": "http://143.20.154.42/bins/bot.arc", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:16 UTC", "discovered_at": "2026-10-04T06:58:16.000Z" }, { "id": 150834, "urlhaus_id": "3928274", "url": "http://143.20.154.42/bins/bot.i586", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:16 UTC", "discovered_at": "2026-10-04T06:58:16.000Z" }, { "id": 150839, "urlhaus_id": "3928273", "url": "https://raw.githubusercontent.com/SCARSTEALSNOW/123/refs/heads/main/mod-injected.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 06:58:14 UTC", "discovered_at": "2026-10-04T06:58:14.000Z" }, { "id": 150838, "urlhaus_id": "3928272", "url": "https://raw.githubusercontent.com/SCARSTEALSNOW/KryptonClient-1.21.1/refs/heads/main/KryptonClient-1.21.1.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 06:58:14 UTC", "discovered_at": "2026-10-04T06:58:14.000Z" }, { "id": 150848, "urlhaus_id": "3928271", "url": "https://raw.githubusercontent.com/snipezcyka091111/Crypto-wallet-bruteforcer/refs/heads/main/Launcher.exe", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150847, "urlhaus_id": "3928270", "url": "https://raw.githubusercontent.com/dutchmans922-afk/krypton-client/refs/heads/main/Krypton-Client-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150846, "urlhaus_id": "3928269", "url": "http://143.20.154.42/bins/bot.arm7", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150845, "urlhaus_id": "3928268", "url": "http://143.20.154.42/bins/bot.m68k", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150844, "urlhaus_id": "3928267", "url": "http://143.20.154.42/bins/bot.mips", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150843, "urlhaus_id": "3928266", "url": "http://143.20.154.42/bins/bot.arm4", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150842, "urlhaus_id": "3928265", "url": "http://143.20.154.42/bins/bot.i486", "host": "143.20.154.42", "host_ip": "143.20.154.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150841, "urlhaus_id": "3928264", "url": "http://66.116.243.130/zed", "host": "66.116.243.130", "host_ip": "66.116.243.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "honeypot, ssh", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150840, "urlhaus_id": "3928263", "url": "http://45.153.34.212:8181/.bia", "host": "45.153.34.212", "host_ip": "45.153.34.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "honeypot, ssh", "last_online": null, "first_seen": "2026-10-04 06:58:13 UTC", "discovered_at": "2026-10-04T06:58:13.000Z" }, { "id": 150849, "urlhaus_id": "3928262", "url": "http://176.65.139.135/bins/dlink.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:58:11 UTC", "discovered_at": "2026-10-04T06:58:11.000Z" }, { "id": 150850, "urlhaus_id": "3928261", "url": "http://45.153.34.212/fakepika", "host": "45.153.34.212", "host_ip": "45.153.34.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "honeypot, ssh", "last_online": null, "first_seen": "2026-10-04 06:58:10 UTC", "discovered_at": "2026-10-04T06:58:10.000Z" }, { "id": 150852, "urlhaus_id": "3928260", "url": "http://59.96.143.187:43269/Mozi.m", "host": "59.96.143.187", "host_ip": "59.96.143.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:58:08 UTC", "discovered_at": "2026-10-04T06:58:08.000Z" }, { "id": 150851, "urlhaus_id": "3928259", "url": "http://64.89.160.48/pxerom.sh", "host": "64.89.160.48", "host_ip": "64.89.160.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-04 06:58:08 UTC", "discovered_at": "2026-10-04T06:58:08.000Z" }, { "id": 150853, "urlhaus_id": "3928258", "url": "http://91.92.242.236/files-129312398/files/file_6d346165fd2c4dfb.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-04 06:58:07 UTC", "discovered_at": "2026-10-04T06:58:07.000Z" }, { "id": 150854, "urlhaus_id": "3928257", "url": "http://125.44.217.130:44615/bin.sh", "host": "125.44.217.130", "host_ip": "125.44.217.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-04 06:57:30 UTC", "discovered_at": "2026-10-04T06:57:30.000Z" }, { "id": 150856, "urlhaus_id": "3928256", "url": "http://180.245.56.161:52486/Mozi.a", "host": "180.245.56.161", "host_ip": "180.245.56.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 06:57:17 UTC", "discovered_at": "2026-10-04T06:57:17.000Z" }, { "id": 150855, "urlhaus_id": "3928255", "url": "http://222.127.68.176:49625/Mozi.a", "host": "222.127.68.176", "host_ip": "222.127.68.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "222-127-68-176, cowrie, elf, honeypot, mirai", "last_online": null, "first_seen": "2026-10-04 06:57:17 UTC", "discovered_at": "2026-10-04T06:57:17.000Z" }, { "id": 150857, "urlhaus_id": "3928254", "url": "http://124.161.116.2:43439/Mozi.m", "host": "124.161.116.2", "host_ip": "124.161.116.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:57:12 UTC", "discovered_at": "2026-10-04T06:57:12.000Z" }, { "id": 150858, "urlhaus_id": "3928253", "url": "http://196.189.197.131:53743/i", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:47:25 UTC", "discovered_at": "2026-10-04T06:47:25.000Z" }, { "id": 150859, "urlhaus_id": "3928252", "url": "http://115.55.232.243:37993/i", "host": "115.55.232.243", "host_ip": "115.55.232.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 06:46:17 UTC", "discovered_at": "2026-10-04T06:46:17.000Z" }, { "id": 150860, "urlhaus_id": "3928251", "url": "http://120.28.214.81:59736/bin.sh", "host": "120.28.214.81", "host_ip": "120.28.214.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:46:16 UTC", "discovered_at": "2026-10-04T06:46:16.000Z" }, { "id": 150861, "urlhaus_id": "3928250", "url": "http://60.23.235.151:34355/bin.sh", "host": "60.23.235.151", "host_ip": "60.23.235.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 06:32:25 UTC", "discovered_at": "2026-10-04T06:32:25.000Z" }, { "id": 150864, "urlhaus_id": "3928249", "url": "http://114.227.64.30:48302/i", "host": "114.227.64.30", "host_ip": "114.227.64.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:32:15 UTC", "discovered_at": "2026-10-04T06:32:15.000Z" }, { "id": 150863, "urlhaus_id": "3928248", "url": "http://210.208.110.20:33009/i", "host": "210.208.110.20", "host_ip": "210.208.110.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:32:15 UTC", "discovered_at": "2026-10-04T06:32:15.000Z" }, { "id": 150862, "urlhaus_id": "3928247", "url": "http://42.234.151.178:45406/i", "host": "42.234.151.178", "host_ip": "42.234.151.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 06:32:15 UTC", "discovered_at": "2026-10-04T06:32:15.000Z" }, { "id": 150866, "urlhaus_id": "3928246", "url": "http://103.152.100.5:55138/i", "host": "103.152.100.5", "host_ip": "103.152.100.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 06:32:14 UTC", "discovered_at": "2026-10-04T06:32:14.000Z" }, { "id": 150865, "urlhaus_id": "3928245", "url": "http://180.190.203.41:50927/i", "host": "180.190.203.41", "host_ip": "180.190.203.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:32:14 UTC", "discovered_at": "2026-10-04T06:32:14.000Z" }, { "id": 150867, "urlhaus_id": "3928244", "url": "http://115.58.93.72:42874/i", "host": "115.58.93.72", "host_ip": "115.58.93.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 06:18:24 UTC", "discovered_at": "2026-10-04T06:18:24.000Z" }, { "id": 150868, "urlhaus_id": "3928243", "url": "http://201.110.137.99:38216/bin.sh", "host": "201.110.137.99", "host_ip": "201.110.137.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:17:12 UTC", "discovered_at": "2026-10-04T06:17:12.000Z" }, { "id": 150869, "urlhaus_id": "3928242", "url": "http://201.110.137.99:38216/i", "host": "201.110.137.99", "host_ip": "201.110.137.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:16:18 UTC", "discovered_at": "2026-10-04T06:16:18.000Z" }, { "id": 150871, "urlhaus_id": "3928241", "url": "http://154.242.137.99:56736/i", "host": "154.242.137.99", "host_ip": "154.242.137.99", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 06:16:17 UTC", "discovered_at": "2026-10-04T06:16:17.000Z" }, { "id": 150870, "urlhaus_id": "3928240", "url": "http://222.134.173.192:52282/bin.sh", "host": "222.134.173.192", "host_ip": "222.134.173.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 06:16:17 UTC", "discovered_at": "2026-10-04T06:16:17.000Z" }, { "id": 150872, "urlhaus_id": "3928239", "url": "http://182.123.244.214:55994/i", "host": "182.123.244.214", "host_ip": "182.123.244.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:02:13 UTC", "discovered_at": "2026-10-04T06:02:13.000Z" }, { "id": 150873, "urlhaus_id": "3928238", "url": "http://114.227.64.30:48302/bin.sh", "host": "114.227.64.30", "host_ip": "114.227.64.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 06:01:20 UTC", "discovered_at": "2026-10-04T06:01:20.000Z" }, { "id": 150874, "urlhaus_id": "3928237", "url": "http://42.235.146.168:60828/i", "host": "42.235.146.168", "host_ip": "42.235.146.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 05:46:20 UTC", "discovered_at": "2026-10-04T05:46:20.000Z" }, { "id": 150875, "urlhaus_id": "3928236", "url": "http://210.208.111.234:36371/i", "host": "210.208.111.234", "host_ip": "210.208.111.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 05:46:16 UTC", "discovered_at": "2026-10-04T05:46:16.000Z" }, { "id": 150876, "urlhaus_id": "3928235", "url": "http://115.55.60.68:46425/i", "host": "115.55.60.68", "host_ip": "115.55.60.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 05:46:15 UTC", "discovered_at": "2026-10-04T05:46:15.000Z" }, { "id": 150877, "urlhaus_id": "3928234", "url": "http://42.226.65.18:39212/i", "host": "42.226.65.18", "host_ip": "42.226.65.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 05:44:24 UTC", "discovered_at": "2026-10-04T05:44:24.000Z" }, { "id": 150878, "urlhaus_id": "3928233", "url": "http://119.167.7.197:48851/i", "host": "119.167.7.197", "host_ip": "119.167.7.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 05:32:13 UTC", "discovered_at": "2026-10-04T05:32:13.000Z" }, { "id": 150880, "urlhaus_id": "3928232", "url": "http://42.6.60.204:52051/i", "host": "42.6.60.204", "host_ip": "42.6.60.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 05:32:12 UTC", "discovered_at": "2026-10-04T05:32:12.000Z" }, { "id": 150879, "urlhaus_id": "3928231", "url": "http://5.166.76.110:36709/bin.sh", "host": "5.166.76.110", "host_ip": "5.166.76.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 05:32:12 UTC", "discovered_at": "2026-10-04T05:32:12.000Z" }, { "id": 150883, "urlhaus_id": "3928230", "url": "http://5.166.76.110:36709/i", "host": "5.166.76.110", "host_ip": "5.166.76.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 05:31:21 UTC", "discovered_at": "2026-10-04T05:31:21.000Z" }, { "id": 150882, "urlhaus_id": "3928229", "url": "http://112.198.195.40:50034/i", "host": "112.198.195.40", "host_ip": "112.198.195.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 05:31:21 UTC", "discovered_at": "2026-10-04T05:31:21.000Z" }, { "id": 150881, "urlhaus_id": "3928228", "url": "http://182.123.244.214:55994/bin.sh", "host": "182.123.244.214", "host_ip": "182.123.244.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 05:31:21 UTC", "discovered_at": "2026-10-04T05:31:21.000Z" }, { "id": 150884, "urlhaus_id": "3928227", "url": "http://115.57.254.86:47288/i", "host": "115.57.254.86", "host_ip": "115.57.254.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 05:17:13 UTC", "discovered_at": "2026-10-04T05:17:13.000Z" }, { "id": 150887, "urlhaus_id": "3928226", "url": "http://59.96.140.39:38624/i", "host": "59.96.140.39", "host_ip": "59.96.140.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 05:17:12 UTC", "discovered_at": "2026-10-04T05:17:12.000Z" }, { "id": 150886, "urlhaus_id": "3928225", "url": "http://115.55.60.68:46425/bin.sh", "host": "115.55.60.68", "host_ip": "115.55.60.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 05:17:12 UTC", "discovered_at": "2026-10-04T05:17:12.000Z" }, { "id": 150885, "urlhaus_id": "3928224", "url": "http://42.57.39.28:34929/bin.sh", "host": "42.57.39.28", "host_ip": "42.57.39.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 05:17:12 UTC", "discovered_at": "2026-10-04T05:17:12.000Z" }, { "id": 150888, "urlhaus_id": "3928223", "url": "http://123.4.49.203:40713/i", "host": "123.4.49.203", "host_ip": "123.4.49.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 05:02:16 UTC", "discovered_at": "2026-10-04T05:02:16.000Z" }, { "id": 150889, "urlhaus_id": "3928222", "url": "http://59.180.141.56:51827/i", "host": "59.180.141.56", "host_ip": "59.180.141.56", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:47:13 UTC", "discovered_at": "2026-10-04T04:47:13.000Z" }, { "id": 150891, "urlhaus_id": "3928221", "url": "http://42.234.245.136:48853/i", "host": "42.234.245.136", "host_ip": "42.234.245.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:46:16 UTC", "discovered_at": "2026-10-04T04:46:16.000Z" }, { "id": 150890, "urlhaus_id": "3928220", "url": "http://115.50.93.22:37256/i", "host": "115.50.93.22", "host_ip": "115.50.93.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:46:16 UTC", "discovered_at": "2026-10-04T04:46:16.000Z" }, { "id": 150892, "urlhaus_id": "3928219", "url": "http://94.183.174.83/bins/devfreq_wq", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:36:18 UTC", "discovered_at": "2026-10-04T04:36:18.000Z" }, { "id": 150893, "urlhaus_id": "3928218", "url": "http://94.183.174.83/bins/rcuop_0", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:35:20 UTC", "discovered_at": "2026-10-04T04:35:20.000Z" }, { "id": 150896, "urlhaus_id": "3928217", "url": "http://94.183.174.83/bins/kblockd0", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:21 UTC", "discovered_at": "2026-10-04T04:34:21.000Z" }, { "id": 150895, "urlhaus_id": "3928216", "url": "http://94.183.174.83/bins/cfg80211d", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:21 UTC", "discovered_at": "2026-10-04T04:34:21.000Z" }, { "id": 150894, "urlhaus_id": "3928215", "url": "http://94.183.174.83/bins/edac_polld", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:21 UTC", "discovered_at": "2026-10-04T04:34:21.000Z" }, { "id": 150898, "urlhaus_id": "3928214", "url": "http://94.183.174.83/bins/xfsaild_sda", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:18 UTC", "discovered_at": "2026-10-04T04:34:18.000Z" }, { "id": 150897, "urlhaus_id": "3928213", "url": "http://94.183.174.83/bins/kswapd0", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:18 UTC", "discovered_at": "2026-10-04T04:34:18.000Z" }, { "id": 150906, "urlhaus_id": "3928212", "url": "http://94.183.174.83/bins/kworker_u8", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150905, "urlhaus_id": "3928211", "url": "http://94.183.174.83/bins/bioset0", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150904, "urlhaus_id": "3928210", "url": "http://94.183.174.83/bins/ecryptfsd", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150903, "urlhaus_id": "3928209", "url": "http://94.183.174.83/bins/ksoftirqd0", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150902, "urlhaus_id": "3928208", "url": "http://94.183.174.83/bins/scsi_tmf_0", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150901, "urlhaus_id": "3928207", "url": "http://94.183.174.83/bins/zswap_shrinkd", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150900, "urlhaus_id": "3928206", "url": "http://94.183.174.83/bins/jbd2_sda1d", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, elf, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150899, "urlhaus_id": "3928205", "url": "http://112.198.130.140:54964/bin.sh", "host": "112.198.130.140", "host_ip": "112.198.130.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 04:34:17 UTC", "discovered_at": "2026-10-04T04:34:17.000Z" }, { "id": 150907, "urlhaus_id": "3928204", "url": "http://94.183.174.83/loader.sh", "host": "94.183.174.83", "host_ip": "94.183.174.83", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-183-174-83, sh, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:34:15 UTC", "discovered_at": "2026-10-04T04:34:15.000Z" }, { "id": 150908, "urlhaus_id": "3928203", "url": "http://118.96.45.141:41464/i", "host": "118.96.45.141", "host_ip": "118.96.45.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 04:32:21 UTC", "discovered_at": "2026-10-04T04:32:21.000Z" }, { "id": 150909, "urlhaus_id": "3928202", "url": "http://122.234.93.189:47036/bin.sh", "host": "122.234.93.189", "host_ip": "122.234.93.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 04:32:17 UTC", "discovered_at": "2026-10-04T04:32:17.000Z" }, { "id": 150910, "urlhaus_id": "3928201", "url": "http://115.50.93.22:37256/bin.sh", "host": "115.50.93.22", "host_ip": "115.50.93.22", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:32:16 UTC", "discovered_at": "2026-10-04T04:32:16.000Z" }, { "id": 150912, "urlhaus_id": "3928200", "url": "http://182.117.3.198:51913/bin.sh", "host": "182.117.3.198", "host_ip": "182.117.3.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:32:15 UTC", "discovered_at": "2026-10-04T04:32:15.000Z" }, { "id": 150911, "urlhaus_id": "3928199", "url": "http://182.121.81.62:59011/i", "host": "182.121.81.62", "host_ip": "182.121.81.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:32:15 UTC", "discovered_at": "2026-10-04T04:32:15.000Z" }, { "id": 150913, "urlhaus_id": "3928198", "url": "http://42.239.114.27:48538/i", "host": "42.239.114.27", "host_ip": "42.239.114.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 04:29:22 UTC", "discovered_at": "2026-10-04T04:29:22.000Z" }, { "id": 150919, "urlhaus_id": "3928197", "url": "https://217.60.102.5/x86_64", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-102-5, elf, Prometei, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:24:24 UTC", "discovered_at": "2026-10-04T04:24:24.000Z" }, { "id": 150918, "urlhaus_id": "3928196", "url": "https://217.60.102.5/aarch64", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-102-5, elf, Prometei, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:24:24 UTC", "discovered_at": "2026-10-04T04:24:24.000Z" }, { "id": 150917, "urlhaus_id": "3928195", "url": "https://217.60.102.5/i686", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-102-5, elf, Prometei, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:24:24 UTC", "discovered_at": "2026-10-04T04:24:24.000Z" }, { "id": 150916, "urlhaus_id": "3928194", "url": "https://217.60.102.5/clean", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-102-5, sh, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:24:24 UTC", "discovered_at": "2026-10-04T04:24:24.000Z" }, { "id": 150915, "urlhaus_id": "3928193", "url": "https://217.60.102.5/riscv", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-102-5, elf, redtail, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:24:24 UTC", "discovered_at": "2026-10-04T04:24:24.000Z" }, { "id": 150914, "urlhaus_id": "3928192", "url": "https://217.60.102.5/arm7", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-102-5, elf, Prometei, ua-wget", "last_online": null, "first_seen": "2026-10-04 04:24:24 UTC", "discovered_at": "2026-10-04T04:24:24.000Z" }, { "id": 150920, "urlhaus_id": "3928191", "url": "http://123.7.236.208:46744/i", "host": "123.7.236.208", "host_ip": "123.7.236.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:17:23 UTC", "discovered_at": "2026-10-04T04:17:23.000Z" }, { "id": 150921, "urlhaus_id": "3928190", "url": "http://222.127.152.103:41384/i", "host": "222.127.152.103", "host_ip": "222.127.152.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 04:17:11 UTC", "discovered_at": "2026-10-04T04:17:11.000Z" }, { "id": 150922, "urlhaus_id": "3928189", "url": "http://113.239.7.101:59216/i", "host": "113.239.7.101", "host_ip": "113.239.7.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 04:17:10 UTC", "discovered_at": "2026-10-04T04:17:10.000Z" }, { "id": 150924, "urlhaus_id": "3928188", "url": "http://42.234.245.136:48853/bin.sh", "host": "42.234.245.136", "host_ip": "42.234.245.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:16:16 UTC", "discovered_at": "2026-10-04T04:16:16.000Z" }, { "id": 150923, "urlhaus_id": "3928187", "url": "http://175.165.87.171:35454/i", "host": "175.165.87.171", "host_ip": "175.165.87.171", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 04:16:16 UTC", "discovered_at": "2026-10-04T04:16:16.000Z" }, { "id": 150926, "urlhaus_id": "3928186", "url": "http://81.236.234.16:40372/i", "host": "81.236.234.16", "host_ip": "81.236.234.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:16:15 UTC", "discovered_at": "2026-10-04T04:16:15.000Z" }, { "id": 150925, "urlhaus_id": "3928185", "url": "http://123.14.114.97:35867/i", "host": "123.14.114.97", "host_ip": "123.14.114.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:16:15 UTC", "discovered_at": "2026-10-04T04:16:15.000Z" }, { "id": 150927, "urlhaus_id": "3928184", "url": "http://123.14.114.97:35867/bin.sh", "host": "123.14.114.97", "host_ip": "123.14.114.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:02:13 UTC", "discovered_at": "2026-10-04T04:02:13.000Z" }, { "id": 150930, "urlhaus_id": "3928183", "url": "http://113.239.7.101:59216/bin.sh", "host": "113.239.7.101", "host_ip": "113.239.7.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 04:02:12 UTC", "discovered_at": "2026-10-04T04:02:12.000Z" }, { "id": 150929, "urlhaus_id": "3928182", "url": "http://27.220.241.66:41824/i", "host": "27.220.241.66", "host_ip": "27.220.241.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 04:02:12 UTC", "discovered_at": "2026-10-04T04:02:12.000Z" }, { "id": 150928, "urlhaus_id": "3928181", "url": "http://42.6.60.72:56795/bin.sh", "host": "42.6.60.72", "host_ip": "42.6.60.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 04:02:12 UTC", "discovered_at": "2026-10-04T04:02:12.000Z" }, { "id": 150933, "urlhaus_id": "3928180", "url": "http://123.7.236.208:46744/bin.sh", "host": "123.7.236.208", "host_ip": "123.7.236.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 03:47:12 UTC", "discovered_at": "2026-10-04T03:47:12.000Z" }, { "id": 150932, "urlhaus_id": "3928179", "url": "http://118.173.109.193:55932/i", "host": "118.173.109.193", "host_ip": "118.173.109.193", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:47:12 UTC", "discovered_at": "2026-10-04T03:47:12.000Z" }, { "id": 150931, "urlhaus_id": "3928178", "url": "http://222.127.152.103:41384/bin.sh", "host": "222.127.152.103", "host_ip": "222.127.152.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:47:12 UTC", "discovered_at": "2026-10-04T03:47:12.000Z" }, { "id": 150934, "urlhaus_id": "3928177", "url": "http://45.232.72.245:57845/bin.sh", "host": "45.232.72.245", "host_ip": "45.232.72.245", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 03:36:13 UTC", "discovered_at": "2026-10-04T03:36:13.000Z" }, { "id": 150935, "urlhaus_id": "3928176", "url": "http://27.44.147.72:42447/bin.sh", "host": "27.44.147.72", "host_ip": "27.44.147.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 03:32:15 UTC", "discovered_at": "2026-10-04T03:32:15.000Z" }, { "id": 150936, "urlhaus_id": "3928175", "url": "http://119.185.242.157:48194/i", "host": "119.185.242.157", "host_ip": "119.185.242.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 03:31:14 UTC", "discovered_at": "2026-10-04T03:31:14.000Z" }, { "id": 150939, "urlhaus_id": "3928174", "url": "http://105.186.100.108:52747/i", "host": "105.186.100.108", "host_ip": "105.186.100.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:31:12 UTC", "discovered_at": "2026-10-04T03:31:12.000Z" }, { "id": 150938, "urlhaus_id": "3928173", "url": "http://105.186.100.108:52747/bin.sh", "host": "105.186.100.108", "host_ip": "105.186.100.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:31:12 UTC", "discovered_at": "2026-10-04T03:31:12.000Z" }, { "id": 150937, "urlhaus_id": "3928172", "url": "http://182.124.250.216:40805/i", "host": "182.124.250.216", "host_ip": "182.124.250.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 03:31:12 UTC", "discovered_at": "2026-10-04T03:31:12.000Z" }, { "id": 150940, "urlhaus_id": "3928171", "url": "http://180.191.152.204:35686/i", "host": "180.191.152.204", "host_ip": "180.191.152.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:31:11 UTC", "discovered_at": "2026-10-04T03:31:11.000Z" }, { "id": 150941, "urlhaus_id": "3928170", "url": "http://113.230.63.237:35849/i", "host": "113.230.63.237", "host_ip": "113.230.63.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 03:17:24 UTC", "discovered_at": "2026-10-04T03:17:24.000Z" }, { "id": 150942, "urlhaus_id": "3928169", "url": "http://123.53.100.94:44391/i", "host": "123.53.100.94", "host_ip": "123.53.100.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:17:17 UTC", "discovered_at": "2026-10-04T03:17:17.000Z" }, { "id": 150943, "urlhaus_id": "3928168", "url": "http://119.115.64.72:38751/bin.sh", "host": "119.115.64.72", "host_ip": "119.115.64.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 03:17:15 UTC", "discovered_at": "2026-10-04T03:17:15.000Z" }, { "id": 150945, "urlhaus_id": "3928167", "url": "http://60.211.44.230:53259/i", "host": "60.211.44.230", "host_ip": "60.211.44.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 03:17:12 UTC", "discovered_at": "2026-10-04T03:17:12.000Z" }, { "id": 150944, "urlhaus_id": "3928166", "url": "http://113.255.197.208:43347/bin.sh", "host": "113.255.197.208", "host_ip": "113.255.197.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 03:17:12 UTC", "discovered_at": "2026-10-04T03:17:12.000Z" }, { "id": 150946, "urlhaus_id": "3928165", "url": "http://123.11.14.31:44331/i", "host": "123.11.14.31", "host_ip": "123.11.14.31", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-04 03:11:19 UTC", "discovered_at": "2026-10-04T03:11:19.000Z" }, { "id": 150948, "urlhaus_id": "3928164", "url": "http://42.227.237.117:49632/i", "host": "42.227.237.117", "host_ip": "42.227.237.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 03:02:14 UTC", "discovered_at": "2026-10-04T03:02:14.000Z" }, { "id": 150947, "urlhaus_id": "3928163", "url": "http://154.242.244.29:49130/bin.sh", "host": "154.242.244.29", "host_ip": "154.242.244.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 03:02:14 UTC", "discovered_at": "2026-10-04T03:02:14.000Z" }, { "id": 150950, "urlhaus_id": "3928162", "url": "http://210.208.110.130:57862/i", "host": "210.208.110.130", "host_ip": "210.208.110.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:02:13 UTC", "discovered_at": "2026-10-04T03:02:13.000Z" }, { "id": 150949, "urlhaus_id": "3928161", "url": "http://196.189.98.110:58307/i", "host": "196.189.98.110", "host_ip": "196.189.98.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 03:02:13 UTC", "discovered_at": "2026-10-04T03:02:13.000Z" }, { "id": 150951, "urlhaus_id": "3928160", "url": "http://113.230.63.237:35849/bin.sh", "host": "113.230.63.237", "host_ip": "113.230.63.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 02:47:10 UTC", "discovered_at": "2026-10-04T02:47:10.000Z" }, { "id": 150952, "urlhaus_id": "3928159", "url": "http://219.154.154.24:35205/bin.sh", "host": "219.154.154.24", "host_ip": "219.154.154.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 02:46:24 UTC", "discovered_at": "2026-10-04T02:46:24.000Z" }, { "id": 150955, "urlhaus_id": "3928158", "url": "http://115.52.236.254:37931/i", "host": "115.52.236.254", "host_ip": "115.52.236.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:32:14 UTC", "discovered_at": "2026-10-04T02:32:14.000Z" }, { "id": 150954, "urlhaus_id": "3928157", "url": "http://193.187.101.227:60560/i", "host": "193.187.101.227", "host_ip": "193.187.101.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:32:14 UTC", "discovered_at": "2026-10-04T02:32:14.000Z" }, { "id": 150953, "urlhaus_id": "3928156", "url": "http://115.62.38.108:51819/bin.sh", "host": "115.62.38.108", "host_ip": "115.62.38.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:32:14 UTC", "discovered_at": "2026-10-04T02:32:14.000Z" }, { "id": 150956, "urlhaus_id": "3928155", "url": "http://222.127.243.18:56892/i", "host": "222.127.243.18", "host_ip": "222.127.243.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 02:25:25 UTC", "discovered_at": "2026-10-04T02:25:25.000Z" }, { "id": 150957, "urlhaus_id": "3928154", "url": "http://180.244.11.238:39539/i", "host": "180.244.11.238", "host_ip": "180.244.11.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:17:16 UTC", "discovered_at": "2026-10-04T02:17:16.000Z" }, { "id": 150962, "urlhaus_id": "3928153", "url": "http://36.26.145.216:52899/bin.sh", "host": "36.26.145.216", "host_ip": "36.26.145.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:17:13 UTC", "discovered_at": "2026-10-04T02:17:13.000Z" }, { "id": 150961, "urlhaus_id": "3928152", "url": "http://61.162.131.138:56605/i", "host": "61.162.131.138", "host_ip": "61.162.131.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:17:13 UTC", "discovered_at": "2026-10-04T02:17:13.000Z" }, { "id": 150960, "urlhaus_id": "3928151", "url": "http://42.85.175.38:37470/i", "host": "42.85.175.38", "host_ip": "42.85.175.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 02:17:13 UTC", "discovered_at": "2026-10-04T02:17:13.000Z" }, { "id": 150959, "urlhaus_id": "3928150", "url": "http://42.224.92.100:41244/i", "host": "42.224.92.100", "host_ip": "42.224.92.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 02:17:13 UTC", "discovered_at": "2026-10-04T02:17:13.000Z" }, { "id": 150958, "urlhaus_id": "3928149", "url": "http://58.168.224.103:36739/i", "host": "58.168.224.103", "host_ip": "58.168.224.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:17:13 UTC", "discovered_at": "2026-10-04T02:17:13.000Z" }, { "id": 150968, "urlhaus_id": "3928148", "url": "http://60.23.233.207:47957/i", "host": "60.23.233.207", "host_ip": "60.23.233.207", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 02:17:12 UTC", "discovered_at": "2026-10-04T02:17:12.000Z" }, { "id": 150967, "urlhaus_id": "3928147", "url": "http://123.13.2.126:49890/i", "host": "123.13.2.126", "host_ip": "123.13.2.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:17:12 UTC", "discovered_at": "2026-10-04T02:17:12.000Z" }, { "id": 150966, "urlhaus_id": "3928146", "url": "http://123.132.129.153:51262/bin.sh", "host": "123.132.129.153", "host_ip": "123.132.129.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:17:12 UTC", "discovered_at": "2026-10-04T02:17:12.000Z" }, { "id": 150965, "urlhaus_id": "3928145", "url": "http://123.190.235.239:55013/bin.sh", "host": "123.190.235.239", "host_ip": "123.190.235.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 02:17:12 UTC", "discovered_at": "2026-10-04T02:17:12.000Z" }, { "id": 150964, "urlhaus_id": "3928144", "url": "http://60.24.122.87:45260/bin.sh", "host": "60.24.122.87", "host_ip": "60.24.122.87", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:17:12 UTC", "discovered_at": "2026-10-04T02:17:12.000Z" }, { "id": 150963, "urlhaus_id": "3928143", "url": "http://115.52.236.254:37931/bin.sh", "host": "115.52.236.254", "host_ip": "115.52.236.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:17:12 UTC", "discovered_at": "2026-10-04T02:17:12.000Z" }, { "id": 150969, "urlhaus_id": "3928142", "url": "http://120.28.68.44:38896/i", "host": "120.28.68.44", "host_ip": "120.28.68.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 02:14:25 UTC", "discovered_at": "2026-10-04T02:14:25.000Z" }, { "id": 150971, "urlhaus_id": "3928141", "url": "http://120.28.76.69:54395/bin.sh", "host": "120.28.76.69", "host_ip": "120.28.76.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 02:03:30 UTC", "discovered_at": "2026-10-04T02:03:30.000Z" }, { "id": 150970, "urlhaus_id": "3928140", "url": "http://219.157.133.197:42186/bin.sh", "host": "219.157.133.197", "host_ip": "219.157.133.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 02:03:30 UTC", "discovered_at": "2026-10-04T02:03:30.000Z" }, { "id": 150972, "urlhaus_id": "3928139", "url": "http://125.44.217.130:44615/i", "host": "125.44.217.130", "host_ip": "125.44.217.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-04 02:02:24 UTC", "discovered_at": "2026-10-04T02:02:24.000Z" }, { "id": 150975, "urlhaus_id": "3928138", "url": "http://42.239.114.27:48538/bin.sh", "host": "42.239.114.27", "host_ip": "42.239.114.27", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:02:16 UTC", "discovered_at": "2026-10-04T02:02:16.000Z" }, { "id": 150974, "urlhaus_id": "3928137", "url": "http://123.13.2.126:49890/bin.sh", "host": "123.13.2.126", "host_ip": "123.13.2.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:02:16 UTC", "discovered_at": "2026-10-04T02:02:16.000Z" }, { "id": 150973, "urlhaus_id": "3928136", "url": "http://182.122.146.199:33616/bin.sh", "host": "182.122.146.199", "host_ip": "182.122.146.199", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:02:16 UTC", "discovered_at": "2026-10-04T02:02:16.000Z" }, { "id": 150981, "urlhaus_id": "3928135", "url": "http://59.96.136.184:34354/i", "host": "59.96.136.184", "host_ip": "59.96.136.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:02:15 UTC", "discovered_at": "2026-10-04T02:02:15.000Z" }, { "id": 150980, "urlhaus_id": "3928134", "url": "http://119.116.37.62:58342/bin.sh", "host": "119.116.37.62", "host_ip": "119.116.37.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 02:02:15 UTC", "discovered_at": "2026-10-04T02:02:15.000Z" }, { "id": 150979, "urlhaus_id": "3928133", "url": "http://42.239.152.61:47498/i", "host": "42.239.152.61", "host_ip": "42.239.152.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:02:15 UTC", "discovered_at": "2026-10-04T02:02:15.000Z" }, { "id": 150978, "urlhaus_id": "3928132", "url": "http://27.215.120.119:53415/bin.sh", "host": "27.215.120.119", "host_ip": "27.215.120.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 02:02:15 UTC", "discovered_at": "2026-10-04T02:02:15.000Z" }, { "id": 150977, "urlhaus_id": "3928131", "url": "http://42.177.196.195:42178/i", "host": "42.177.196.195", "host_ip": "42.177.196.195", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 02:02:15 UTC", "discovered_at": "2026-10-04T02:02:15.000Z" }, { "id": 150976, "urlhaus_id": "3928130", "url": "http://193.187.101.227:60560/bin.sh", "host": "193.187.101.227", "host_ip": "193.187.101.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 02:02:15 UTC", "discovered_at": "2026-10-04T02:02:15.000Z" }, { "id": 150982, "urlhaus_id": "3928129", "url": "http://222.134.173.192:52282/i", "host": "222.134.173.192", "host_ip": "222.134.173.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 01:47:24 UTC", "discovered_at": "2026-10-04T01:47:24.000Z" }, { "id": 150983, "urlhaus_id": "3928128", "url": "http://58.168.224.103:36739/bin.sh", "host": "58.168.224.103", "host_ip": "58.168.224.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 01:47:16 UTC", "discovered_at": "2026-10-04T01:47:16.000Z" }, { "id": 150985, "urlhaus_id": "3928127", "url": "http://123.189.18.207:38734/i", "host": "123.189.18.207", "host_ip": "123.189.18.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 01:47:12 UTC", "discovered_at": "2026-10-04T01:47:12.000Z" }, { "id": 150984, "urlhaus_id": "3928126", "url": "http://60.23.233.207:47957/bin.sh", "host": "60.23.233.207", "host_ip": "60.23.233.207", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 01:47:12 UTC", "discovered_at": "2026-10-04T01:47:12.000Z" }, { "id": 150988, "urlhaus_id": "3928125", "url": "http://182.126.81.217:41612/i", "host": "182.126.81.217", "host_ip": "182.126.81.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 01:47:11 UTC", "discovered_at": "2026-10-04T01:47:11.000Z" }, { "id": 150987, "urlhaus_id": "3928124", "url": "http://120.28.68.44:38896/bin.sh", "host": "120.28.68.44", "host_ip": "120.28.68.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 01:47:11 UTC", "discovered_at": "2026-10-04T01:47:11.000Z" }, { "id": 150986, "urlhaus_id": "3928123", "url": "http://202.166.165.60:53927/bin.sh", "host": "202.166.165.60", "host_ip": "202.166.165.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 01:47:11 UTC", "discovered_at": "2026-10-04T01:47:11.000Z" }, { "id": 150989, "urlhaus_id": "3928122", "url": "http://42.177.196.195:42178/bin.sh", "host": "42.177.196.195", "host_ip": "42.177.196.195", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 01:34:12 UTC", "discovered_at": "2026-10-04T01:34:12.000Z" }, { "id": 150990, "urlhaus_id": "3928121", "url": "http://42.239.152.61:47498/bin.sh", "host": "42.239.152.61", "host_ip": "42.239.152.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 01:33:12 UTC", "discovered_at": "2026-10-04T01:33:12.000Z" }, { "id": 150991, "urlhaus_id": "3928120", "url": "http://119.187.227.112:33171/i", "host": "119.187.227.112", "host_ip": "119.187.227.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 01:32:15 UTC", "discovered_at": "2026-10-04T01:32:15.000Z" }, { "id": 150992, "urlhaus_id": "3928119", "url": "http://60.184.200.82:55517/i", "host": "60.184.200.82", "host_ip": "60.184.200.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 01:32:14 UTC", "discovered_at": "2026-10-04T01:32:14.000Z" }, { "id": 150994, "urlhaus_id": "3928118", "url": "http://59.96.136.184:34354/bin.sh", "host": "59.96.136.184", "host_ip": "59.96.136.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 01:32:13 UTC", "discovered_at": "2026-10-04T01:32:13.000Z" }, { "id": 150993, "urlhaus_id": "3928117", "url": "http://125.45.26.82:60448/i", "host": "125.45.26.82", "host_ip": "125.45.26.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 01:32:13 UTC", "discovered_at": "2026-10-04T01:32:13.000Z" }, { "id": 150995, "urlhaus_id": "3928116", "url": "http://216.129.184.213:43920/i", "host": "216.129.184.213", "host_ip": "216.129.184.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 01:29:17 UTC", "discovered_at": "2026-10-04T01:29:17.000Z" }, { "id": 150996, "urlhaus_id": "3928115", "url": "http://216.129.184.213:43920/bin.sh", "host": "216.129.184.213", "host_ip": "216.129.184.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 01:18:24 UTC", "discovered_at": "2026-10-04T01:18:24.000Z" }, { "id": 150997, "urlhaus_id": "3928114", "url": "http://125.42.8.63:35061/i", "host": "125.42.8.63", "host_ip": "125.42.8.63", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 01:17:12 UTC", "discovered_at": "2026-10-04T01:17:12.000Z" }, { "id": 150998, "urlhaus_id": "3928113", "url": "http://115.49.25.182:54356/i", "host": "115.49.25.182", "host_ip": "115.49.25.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 01:15:22 UTC", "discovered_at": "2026-10-04T01:15:22.000Z" }, { "id": 151000, "urlhaus_id": "3928112", "url": "http://123.173.109.217:58287/i", "host": "123.173.109.217", "host_ip": "123.173.109.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 01:02:14 UTC", "discovered_at": "2026-10-04T01:02:14.000Z" }, { "id": 150999, "urlhaus_id": "3928111", "url": "http://42.5.247.215:47417/bin.sh", "host": "42.5.247.215", "host_ip": "42.5.247.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 01:02:14 UTC", "discovered_at": "2026-10-04T01:02:14.000Z" }, { "id": 151001, "urlhaus_id": "3928110", "url": "http://105.184.13.146:59119/i", "host": "105.184.13.146", "host_ip": "105.184.13.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 01:01:13 UTC", "discovered_at": "2026-10-04T01:01:13.000Z" }, { "id": 151002, "urlhaus_id": "3928109", "url": "http://39.88.227.19:47791/i", "host": "39.88.227.19", "host_ip": "39.88.227.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 00:55:45 UTC", "discovered_at": "2026-10-04T00:55:45.000Z" }, { "id": 151003, "urlhaus_id": "3928108", "url": "http://101.23.121.201:59456/i", "host": "101.23.121.201", "host_ip": "101.23.121.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 00:54:32 UTC", "discovered_at": "2026-10-04T00:54:32.000Z" }, { "id": 151004, "urlhaus_id": "3928107", "url": "http://101.23.121.201:59456/bin.sh", "host": "101.23.121.201", "host_ip": "101.23.121.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-04 00:51:28 UTC", "discovered_at": "2026-10-04T00:51:28.000Z" }, { "id": 151005, "urlhaus_id": "3928106", "url": "http://115.49.25.182:54356/bin.sh", "host": "115.49.25.182", "host_ip": "115.49.25.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-04 00:46:25 UTC", "discovered_at": "2026-10-04T00:46:25.000Z" }, { "id": 151006, "urlhaus_id": "3928105", "url": "http://115.195.181.95:38529/i", "host": "115.195.181.95", "host_ip": "115.195.181.95", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:46:18 UTC", "discovered_at": "2026-10-04T00:46:18.000Z" }, { "id": 151009, "urlhaus_id": "3928104", "url": "http://123.12.41.147:41710/bin.sh", "host": "123.12.41.147", "host_ip": "123.12.41.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 00:46:14 UTC", "discovered_at": "2026-10-04T00:46:14.000Z" }, { "id": 151008, "urlhaus_id": "3928103", "url": "http://222.127.158.71:46376/i", "host": "222.127.158.71", "host_ip": "222.127.158.71", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:46:14 UTC", "discovered_at": "2026-10-04T00:46:14.000Z" }, { "id": 151007, "urlhaus_id": "3928102", "url": "http://182.112.94.114:54385/bin.sh", "host": "182.112.94.114", "host_ip": "182.112.94.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 00:46:14 UTC", "discovered_at": "2026-10-04T00:46:14.000Z" }, { "id": 151011, "urlhaus_id": "3928101", "url": "http://42.5.129.20:42965/bin.sh", "host": "42.5.129.20", "host_ip": "42.5.129.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 00:32:16 UTC", "discovered_at": "2026-10-04T00:32:16.000Z" }, { "id": 151010, "urlhaus_id": "3928100", "url": "http://125.45.26.82:60448/bin.sh", "host": "125.45.26.82", "host_ip": "125.45.26.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 00:32:16 UTC", "discovered_at": "2026-10-04T00:32:16.000Z" }, { "id": 151012, "urlhaus_id": "3928099", "url": "http://87.15.9.134:39054/i", "host": "87.15.9.134", "host_ip": "87.15.9.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:32:15 UTC", "discovered_at": "2026-10-04T00:32:15.000Z" }, { "id": 151013, "urlhaus_id": "3928098", "url": "http://182.240.203.200:57733/i", "host": "182.240.203.200", "host_ip": "182.240.203.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:17:38 UTC", "discovered_at": "2026-10-04T00:17:38.000Z" }, { "id": 151014, "urlhaus_id": "3928097", "url": "http://60.19.211.91:44536/bin.sh", "host": "60.19.211.91", "host_ip": "60.19.211.91", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 00:17:18 UTC", "discovered_at": "2026-10-04T00:17:18.000Z" }, { "id": 151017, "urlhaus_id": "3928096", "url": "http://175.9.152.9:52887/i", "host": "175.9.152.9", "host_ip": "175.9.152.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:17:17 UTC", "discovered_at": "2026-10-04T00:17:17.000Z" }, { "id": 151016, "urlhaus_id": "3928095", "url": "http://222.127.158.71:46376/bin.sh", "host": "222.127.158.71", "host_ip": "222.127.158.71", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:17:17 UTC", "discovered_at": "2026-10-04T00:17:17.000Z" }, { "id": 151015, "urlhaus_id": "3928094", "url": "http://175.165.87.209:45166/i", "host": "175.165.87.209", "host_ip": "175.165.87.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 00:17:17 UTC", "discovered_at": "2026-10-04T00:17:17.000Z" }, { "id": 151018, "urlhaus_id": "3928093", "url": "https://nfadealer.top/download?payload=lummaStealer.exe", "host": "nfadealer.top", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-04 00:08:13 UTC", "discovered_at": "2026-10-04T00:08:13.000Z" }, { "id": 151019, "urlhaus_id": "3928092", "url": "http://175.165.87.209:45166/bin.sh", "host": "175.165.87.209", "host_ip": "175.165.87.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-04 00:03:17 UTC", "discovered_at": "2026-10-04T00:03:17.000Z" }, { "id": 151021, "urlhaus_id": "3928091", "url": "http://105.186.219.233:40121/i", "host": "105.186.219.233", "host_ip": "105.186.219.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:02:12 UTC", "discovered_at": "2026-10-04T00:02:12.000Z" }, { "id": 151020, "urlhaus_id": "3928090", "url": "http://41.108.157.52:55041/i", "host": "41.108.157.52", "host_ip": "41.108.157.52", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-04 00:02:12 UTC", "discovered_at": "2026-10-04T00:02:12.000Z" }, { "id": 151022, "urlhaus_id": "3928089", "url": "http://87.15.9.134:39054/bin.sh", "host": "87.15.9.134", "host_ip": "87.15.9.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:01:20 UTC", "discovered_at": "2026-10-04T00:01:20.000Z" }, { "id": 151023, "urlhaus_id": "3928088", "url": "http://183.12.166.29:44417/i", "host": "183.12.166.29", "host_ip": "183.12.166.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:01:19 UTC", "discovered_at": "2026-10-04T00:01:19.000Z" }, { "id": 151024, "urlhaus_id": "3928087", "url": "http://115.56.146.196:35484/bin.sh", "host": "115.56.146.196", "host_ip": "115.56.146.196", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-04 00:01:18 UTC", "discovered_at": "2026-10-04T00:01:18.000Z" }, { "id": 151026, "urlhaus_id": "3928086", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:26 UTC", "discovered_at": "2026-10-03T23:51:26.000Z" }, { "id": 151025, "urlhaus_id": "3928085", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnm68kxnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:26 UTC", "discovered_at": "2026-10-03T23:51:26.000Z" }, { "id": 151027, "urlhaus_id": "3928084", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnsh4xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:25 UTC", "discovered_at": "2026-10-03T23:51:25.000Z" }, { "id": 151034, "urlhaus_id": "3928083", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnsh4xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:21 UTC", "discovered_at": "2026-10-03T23:51:21.000Z" }, { "id": 151033, "urlhaus_id": "3928082", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnsh2xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:21 UTC", "discovered_at": "2026-10-03T23:51:21.000Z" }, { "id": 151032, "urlhaus_id": "3928081", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:21 UTC", "discovered_at": "2026-10-03T23:51:21.000Z" }, { "id": 151031, "urlhaus_id": "3928080", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:21 UTC", "discovered_at": "2026-10-03T23:51:21.000Z" }, { "id": 151030, "urlhaus_id": "3928079", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnsh2xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:21 UTC", "discovered_at": "2026-10-03T23:51:21.000Z" }, { "id": 151029, "urlhaus_id": "3928078", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxni386xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:21 UTC", "discovered_at": "2026-10-03T23:51:21.000Z" }, { "id": 151028, "urlhaus_id": "3928077", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:21 UTC", "discovered_at": "2026-10-03T23:51:21.000Z" }, { "id": 151050, "urlhaus_id": "3928076", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnmipsxnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151049, "urlhaus_id": "3928075", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnor1kxnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151048, "urlhaus_id": "3928074", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnm68kxnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151047, "urlhaus_id": "3928073", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151046, "urlhaus_id": "3928072", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151045, "urlhaus_id": "3928071", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151044, "urlhaus_id": "3928070", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151043, "urlhaus_id": "3928069", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxni386xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151042, "urlhaus_id": "3928068", "url": "http://82.22.23.132/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151041, "urlhaus_id": "3928067", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151040, "urlhaus_id": "3928066", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151039, "urlhaus_id": "3928065", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151038, "urlhaus_id": "3928064", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnor1kxnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151037, "urlhaus_id": "3928063", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151036, "urlhaus_id": "3928062", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnmipsxnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151035, "urlhaus_id": "3928061", "url": "http://91.208.197.133/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:51:20 UTC", "discovered_at": "2026-10-03T23:51:20.000Z" }, { "id": 151060, "urlhaus_id": "3928060", "url": "http://103.245.237.10/d/akido.mips", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151059, "urlhaus_id": "3928059", "url": "http://103.245.237.10/d/akido.sh4", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151058, "urlhaus_id": "3928058", "url": "http://103.245.237.10/d/akido.arm", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151057, "urlhaus_id": "3928057", "url": "http://103.245.237.10/d/akido.mpsl", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151056, "urlhaus_id": "3928056", "url": "http://103.245.237.10/d/akido.spc", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151055, "urlhaus_id": "3928055", "url": "http://103.245.237.10/d/akido.arm5", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151054, "urlhaus_id": "3928054", "url": "http://103.245.237.10/d/akido.ppc", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151053, "urlhaus_id": "3928053", "url": "http://103.245.237.10/d/akido.arm6", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151052, "urlhaus_id": "3928052", "url": "http://103.245.237.10/d/akido.m68k", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151051, "urlhaus_id": "3928051", "url": "http://103.245.237.10/d/akido.x86", "host": "103.245.237.10", "host_ip": "103.245.237.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:34 UTC", "discovered_at": "2026-10-03T23:49:34.000Z" }, { "id": 151064, "urlhaus_id": "3928050", "url": "http://5.175.222.236/run.sh", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:33 UTC", "discovered_at": "2026-10-03T23:49:33.000Z" }, { "id": 151063, "urlhaus_id": "3928049", "url": "http://89.185.82.24/giga", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:33 UTC", "discovered_at": "2026-10-03T23:49:33.000Z" }, { "id": 151062, "urlhaus_id": "3928048", "url": "http://89.185.82.24/l", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:33 UTC", "discovered_at": "2026-10-03T23:49:33.000Z" }, { "id": 151061, "urlhaus_id": "3928047", "url": "http://176.65.139.242/.Sarm", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:33 UTC", "discovered_at": "2026-10-03T23:49:33.000Z" }, { "id": 151065, "urlhaus_id": "3928046", "url": "http://91.208.197.133/run.sh", "host": "91.208.197.133", "host_ip": "91.208.197.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:31 UTC", "discovered_at": "2026-10-03T23:49:31.000Z" }, { "id": 151066, "urlhaus_id": "3928045", "url": "http://82.22.23.132/run.sh", "host": "82.22.23.132", "host_ip": "82.22.23.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:23 UTC", "discovered_at": "2026-10-03T23:49:23.000Z" }, { "id": 151070, "urlhaus_id": "3928044", "url": "http://89.185.82.24/tmips", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:22 UTC", "discovered_at": "2026-10-03T23:49:22.000Z" }, { "id": 151069, "urlhaus_id": "3928043", "url": "http://89.185.82.24/bos", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:22 UTC", "discovered_at": "2026-10-03T23:49:22.000Z" }, { "id": 151068, "urlhaus_id": "3928042", "url": "http://89.185.82.24/p", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:22 UTC", "discovered_at": "2026-10-03T23:49:22.000Z" }, { "id": 151067, "urlhaus_id": "3928041", "url": "http://89.185.82.24/mips2", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:22 UTC", "discovered_at": "2026-10-03T23:49:22.000Z" }, { "id": 151073, "urlhaus_id": "3928040", "url": "http://89.185.82.24/arm77", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:21 UTC", "discovered_at": "2026-10-03T23:49:21.000Z" }, { "id": 151072, "urlhaus_id": "3928039", "url": "http://176.65.139.242/.Ssh4", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:21 UTC", "discovered_at": "2026-10-03T23:49:21.000Z" }, { "id": 151071, "urlhaus_id": "3928038", "url": "http://89.185.82.24/faith", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:21 UTC", "discovered_at": "2026-10-03T23:49:21.000Z" }, { "id": 151074, "urlhaus_id": "3928037", "url": "http://89.185.82.24/tmps", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 23:49:19 UTC", "discovered_at": "2026-10-03T23:49:19.000Z" }, { "id": 151077, "urlhaus_id": "3928036", "url": "http://60.24.122.87:45260/i", "host": "60.24.122.87", "host_ip": "60.24.122.87", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 23:47:15 UTC", "discovered_at": "2026-10-03T23:47:15.000Z" }, { "id": 151076, "urlhaus_id": "3928035", "url": "http://61.52.89.191:41661/bin.sh", "host": "61.52.89.191", "host_ip": "61.52.89.191", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 23:47:15 UTC", "discovered_at": "2026-10-03T23:47:15.000Z" }, { "id": 151075, "urlhaus_id": "3928034", "url": "http://27.215.120.119:53415/i", "host": "27.215.120.119", "host_ip": "27.215.120.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:47:15 UTC", "discovered_at": "2026-10-03T23:47:15.000Z" }, { "id": 151078, "urlhaus_id": "3928033", "url": "http://45.171.177.193:43408/bin.sh", "host": "45.171.177.193", "host_ip": "45.171.177.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 23:47:14 UTC", "discovered_at": "2026-10-03T23:47:14.000Z" }, { "id": 151079, "urlhaus_id": "3928032", "url": "http://182.127.85.137:60203/bin.sh", "host": "182.127.85.137", "host_ip": "182.127.85.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 23:43:28 UTC", "discovered_at": "2026-10-03T23:43:28.000Z" }, { "id": 151080, "urlhaus_id": "3928031", "url": "http://116.74.82.93:52684/i", "host": "116.74.82.93", "host_ip": "116.74.82.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:32:16 UTC", "discovered_at": "2026-10-03T23:32:16.000Z" }, { "id": 151085, "urlhaus_id": "3928030", "url": "http://221.1.147.102:37178/i", "host": "221.1.147.102", "host_ip": "221.1.147.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:32:13 UTC", "discovered_at": "2026-10-03T23:32:13.000Z" }, { "id": 151084, "urlhaus_id": "3928029", "url": "http://42.227.202.105:44328/i", "host": "42.227.202.105", "host_ip": "42.227.202.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:32:13 UTC", "discovered_at": "2026-10-03T23:32:13.000Z" }, { "id": 151083, "urlhaus_id": "3928028", "url": "http://41.108.157.52:55041/bin.sh", "host": "41.108.157.52", "host_ip": "41.108.157.52", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:32:13 UTC", "discovered_at": "2026-10-03T23:32:13.000Z" }, { "id": 151082, "urlhaus_id": "3928027", "url": "http://39.81.228.230:58515/i", "host": "39.81.228.230", "host_ip": "39.81.228.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:32:13 UTC", "discovered_at": "2026-10-03T23:32:13.000Z" }, { "id": 151081, "urlhaus_id": "3928026", "url": "http://27.222.86.235:55674/bin.sh", "host": "27.222.86.235", "host_ip": "27.222.86.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:32:13 UTC", "discovered_at": "2026-10-03T23:32:13.000Z" }, { "id": 151086, "urlhaus_id": "3928025", "url": "http://27.222.86.235:55674/i", "host": "27.222.86.235", "host_ip": "27.222.86.235", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 23:22:28 UTC", "discovered_at": "2026-10-03T23:22:28.000Z" }, { "id": 151088, "urlhaus_id": "3928024", "url": "http://182.119.69.168:36270/i", "host": "182.119.69.168", "host_ip": "182.119.69.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:17:16 UTC", "discovered_at": "2026-10-03T23:17:16.000Z" }, { "id": 151087, "urlhaus_id": "3928023", "url": "http://39.79.64.231:35565/i", "host": "39.79.64.231", "host_ip": "39.79.64.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:17:16 UTC", "discovered_at": "2026-10-03T23:17:16.000Z" }, { "id": 151091, "urlhaus_id": "3928022", "url": "http://190.109.227.228:43465/bin.sh", "host": "190.109.227.228", "host_ip": "190.109.227.228", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 23:17:15 UTC", "discovered_at": "2026-10-03T23:17:15.000Z" }, { "id": 151090, "urlhaus_id": "3928021", "url": "http://222.140.197.247:44860/bin.sh", "host": "222.140.197.247", "host_ip": "222.140.197.247", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:17:15 UTC", "discovered_at": "2026-10-03T23:17:15.000Z" }, { "id": 151089, "urlhaus_id": "3928020", "url": "http://123.4.198.178:57006/i", "host": "123.4.198.178", "host_ip": "123.4.198.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:17:15 UTC", "discovered_at": "2026-10-03T23:17:15.000Z" }, { "id": 151092, "urlhaus_id": "3928019", "url": "http://115.50.75.75:60402/i", "host": "115.50.75.75", "host_ip": "115.50.75.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 23:10:25 UTC", "discovered_at": "2026-10-03T23:10:25.000Z" }, { "id": 151093, "urlhaus_id": "3928018", "url": "http://36.65.52.119:56141/i", "host": "36.65.52.119", "host_ip": "36.65.52.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 23:02:26 UTC", "discovered_at": "2026-10-03T23:02:26.000Z" }, { "id": 151094, "urlhaus_id": "3928017", "url": "http://116.74.82.93:52684/bin.sh", "host": "116.74.82.93", "host_ip": "116.74.82.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:02:12 UTC", "discovered_at": "2026-10-03T23:02:12.000Z" }, { "id": 151097, "urlhaus_id": "3928016", "url": "http://222.137.213.43:55204/i", "host": "222.137.213.43", "host_ip": "222.137.213.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:02:11 UTC", "discovered_at": "2026-10-03T23:02:11.000Z" }, { "id": 151096, "urlhaus_id": "3928015", "url": "http://85.140.44.96:51539/i", "host": "85.140.44.96", "host_ip": "85.140.44.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 23:02:11 UTC", "discovered_at": "2026-10-03T23:02:11.000Z" }, { "id": 151095, "urlhaus_id": "3928014", "url": "http://222.138.151.54:59252/i", "host": "222.138.151.54", "host_ip": "222.138.151.54", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 23:02:11 UTC", "discovered_at": "2026-10-03T23:02:11.000Z" }, { "id": 151098, "urlhaus_id": "3928013", "url": "http://119.186.191.210:54178/i", "host": "119.186.191.210", "host_ip": "119.186.191.210", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:47:18 UTC", "discovered_at": "2026-10-03T22:47:18.000Z" }, { "id": 151100, "urlhaus_id": "3928012", "url": "http://182.127.85.137:60203/i", "host": "182.127.85.137", "host_ip": "182.127.85.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:47:16 UTC", "discovered_at": "2026-10-03T22:47:16.000Z" }, { "id": 151099, "urlhaus_id": "3928011", "url": "http://123.4.198.178:57006/bin.sh", "host": "123.4.198.178", "host_ip": "123.4.198.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:47:16 UTC", "discovered_at": "2026-10-03T22:47:16.000Z" }, { "id": 151102, "urlhaus_id": "3928010", "url": "http://182.127.110.4:56903/i", "host": "182.127.110.4", "host_ip": "182.127.110.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:47:15 UTC", "discovered_at": "2026-10-03T22:47:15.000Z" }, { "id": 151101, "urlhaus_id": "3928009", "url": "http://222.137.213.43:55204/bin.sh", "host": "222.137.213.43", "host_ip": "222.137.213.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:47:15 UTC", "discovered_at": "2026-10-03T22:47:15.000Z" }, { "id": 151103, "urlhaus_id": "3928008", "url": "http://222.138.151.54:59252/bin.sh", "host": "222.138.151.54", "host_ip": "222.138.151.54", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 22:46:14 UTC", "discovered_at": "2026-10-03T22:46:14.000Z" }, { "id": 151104, "urlhaus_id": "3928007", "url": "http://121.231.117.51:34841/bin.sh", "host": "121.231.117.51", "host_ip": "121.231.117.51", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 22:36:21 UTC", "discovered_at": "2026-10-03T22:36:21.000Z" }, { "id": 151105, "urlhaus_id": "3928006", "url": "http://39.90.148.38:35621/bin.sh", "host": "39.90.148.38", "host_ip": "39.90.148.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:33:12 UTC", "discovered_at": "2026-10-03T22:33:12.000Z" }, { "id": 151106, "urlhaus_id": "3928005", "url": "http://154.242.244.29:49130/i", "host": "154.242.244.29", "host_ip": "154.242.244.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 22:32:14 UTC", "discovered_at": "2026-10-03T22:32:14.000Z" }, { "id": 151110, "urlhaus_id": "3928004", "url": "http://58.47.66.76:44683/i", "host": "58.47.66.76", "host_ip": "58.47.66.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 22:32:13 UTC", "discovered_at": "2026-10-03T22:32:13.000Z" }, { "id": 151109, "urlhaus_id": "3928003", "url": "http://182.127.110.4:56903/bin.sh", "host": "182.127.110.4", "host_ip": "182.127.110.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:32:13 UTC", "discovered_at": "2026-10-03T22:32:13.000Z" }, { "id": 151108, "urlhaus_id": "3928002", "url": "http://59.180.142.74:49007/i", "host": "59.180.142.74", "host_ip": "59.180.142.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:32:13 UTC", "discovered_at": "2026-10-03T22:32:13.000Z" }, { "id": 151107, "urlhaus_id": "3928001", "url": "http://175.151.177.19:38792/bin.sh", "host": "175.151.177.19", "host_ip": "175.151.177.19", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 22:32:13 UTC", "discovered_at": "2026-10-03T22:32:13.000Z" }, { "id": 151111, "urlhaus_id": "3928000", "url": "http://27.220.125.104:55409/bin.sh", "host": "27.220.125.104", "host_ip": "27.220.125.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 22:23:22 UTC", "discovered_at": "2026-10-03T22:23:22.000Z" }, { "id": 151112, "urlhaus_id": "3927999", "url": "http://59.180.142.74:49007/bin.sh", "host": "59.180.142.74", "host_ip": "59.180.142.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:17:35 UTC", "discovered_at": "2026-10-03T22:17:35.000Z" }, { "id": 151113, "urlhaus_id": "3927998", "url": "http://39.61.136.57:46369/i", "host": "39.61.136.57", "host_ip": "39.61.136.57", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:17:15 UTC", "discovered_at": "2026-10-03T22:17:15.000Z" }, { "id": 151114, "urlhaus_id": "3927997", "url": "http://112.198.130.140:54964/i", "host": "112.198.130.140", "host_ip": "112.198.130.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 22:17:14 UTC", "discovered_at": "2026-10-03T22:17:14.000Z" }, { "id": 151115, "urlhaus_id": "3927996", "url": "http://182.113.31.183:56513/i", "host": "182.113.31.183", "host_ip": "182.113.31.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:02:12 UTC", "discovered_at": "2026-10-03T22:02:12.000Z" }, { "id": 151116, "urlhaus_id": "3927995", "url": "http://123.5.147.97:42445/bin.sh", "host": "123.5.147.97", "host_ip": "123.5.147.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 22:02:11 UTC", "discovered_at": "2026-10-03T22:02:11.000Z" }, { "id": 151117, "urlhaus_id": "3927994", "url": "http://178.176.223.215:47291/i", "host": "178.176.223.215", "host_ip": "178.176.223.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 22:01:03 UTC", "discovered_at": "2026-10-03T22:01:03.000Z" }, { "id": 151118, "urlhaus_id": "3927993", "url": "http://115.55.221.184:42148/bin.sh", "host": "115.55.221.184", "host_ip": "115.55.221.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 21:47:26 UTC", "discovered_at": "2026-10-03T21:47:26.000Z" }, { "id": 151119, "urlhaus_id": "3927992", "url": "http://222.140.197.247:44860/i", "host": "222.140.197.247", "host_ip": "222.140.197.247", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:47:17 UTC", "discovered_at": "2026-10-03T21:47:17.000Z" }, { "id": 151120, "urlhaus_id": "3927991", "url": "http://42.5.247.215:47417/i", "host": "42.5.247.215", "host_ip": "42.5.247.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 21:47:16 UTC", "discovered_at": "2026-10-03T21:47:16.000Z" }, { "id": 151121, "urlhaus_id": "3927990", "url": "http://42.228.40.6:38412/i", "host": "42.228.40.6", "host_ip": "42.228.40.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:47:15 UTC", "discovered_at": "2026-10-03T21:47:15.000Z" }, { "id": 151122, "urlhaus_id": "3927989", "url": "http://171.37.206.165:38393/i", "host": "171.37.206.165", "host_ip": "171.37.206.165", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 21:46:15 UTC", "discovered_at": "2026-10-03T21:46:15.000Z" }, { "id": 151123, "urlhaus_id": "3927988", "url": "http://119.187.177.158:40993/bin.sh", "host": "119.187.177.158", "host_ip": "119.187.177.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 21:46:14 UTC", "discovered_at": "2026-10-03T21:46:14.000Z" }, { "id": 151124, "urlhaus_id": "3927987", "url": "http://112.229.244.155:37347/bin.sh", "host": "112.229.244.155", "host_ip": "112.229.244.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 21:33:27 UTC", "discovered_at": "2026-10-03T21:33:27.000Z" }, { "id": 151125, "urlhaus_id": "3927986", "url": "http://59.180.138.122:38042/i", "host": "59.180.138.122", "host_ip": "59.180.138.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:32:20 UTC", "discovered_at": "2026-10-03T21:32:20.000Z" }, { "id": 151126, "urlhaus_id": "3927985", "url": "http://123.190.227.186:42588/i", "host": "123.190.227.186", "host_ip": "123.190.227.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 21:32:14 UTC", "discovered_at": "2026-10-03T21:32:14.000Z" }, { "id": 151127, "urlhaus_id": "3927984", "url": "http://119.185.154.155:43872/bin.sh", "host": "119.185.154.155", "host_ip": "119.185.154.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:32:13 UTC", "discovered_at": "2026-10-03T21:32:13.000Z" }, { "id": 151131, "urlhaus_id": "3927983", "url": "http://182.112.94.114:54385/i", "host": "182.112.94.114", "host_ip": "182.112.94.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 21:32:12 UTC", "discovered_at": "2026-10-03T21:32:12.000Z" }, { "id": 151130, "urlhaus_id": "3927982", "url": "http://187.110.223.227:55610/i", "host": "187.110.223.227", "host_ip": "187.110.223.227", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 21:32:12 UTC", "discovered_at": "2026-10-03T21:32:12.000Z" }, { "id": 151129, "urlhaus_id": "3927981", "url": "http://123.132.129.153:51262/i", "host": "123.132.129.153", "host_ip": "123.132.129.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:32:12 UTC", "discovered_at": "2026-10-03T21:32:12.000Z" }, { "id": 151128, "urlhaus_id": "3927980", "url": "http://202.1.26.13:44204/bin.sh", "host": "202.1.26.13", "host_ip": "202.1.26.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:32:12 UTC", "discovered_at": "2026-10-03T21:32:12.000Z" }, { "id": 151132, "urlhaus_id": "3927979", "url": "http://27.215.89.229:55829/i", "host": "27.215.89.229", "host_ip": "27.215.89.229", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 21:17:29 UTC", "discovered_at": "2026-10-03T21:17:29.000Z" }, { "id": 151133, "urlhaus_id": "3927978", "url": "http://42.228.40.6:38412/bin.sh", "host": "42.228.40.6", "host_ip": "42.228.40.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:17:17 UTC", "discovered_at": "2026-10-03T21:17:17.000Z" }, { "id": 151134, "urlhaus_id": "3927977", "url": "http://115.50.75.75:60402/bin.sh", "host": "115.50.75.75", "host_ip": "115.50.75.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:17:16 UTC", "discovered_at": "2026-10-03T21:17:16.000Z" }, { "id": 151135, "urlhaus_id": "3927976", "url": "http://185.233.94.151:29366/i", "host": "185.233.94.151", "host_ip": "185.233.94.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 21:02:23 UTC", "discovered_at": "2026-10-03T21:02:23.000Z" }, { "id": 151139, "urlhaus_id": "3927975", "url": "http://123.172.51.198:60238/i", "host": "123.172.51.198", "host_ip": "123.172.51.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 21:02:12 UTC", "discovered_at": "2026-10-03T21:02:12.000Z" }, { "id": 151138, "urlhaus_id": "3927974", "url": "http://223.151.73.30:43117/i", "host": "223.151.73.30", "host_ip": "223.151.73.30", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 21:02:12 UTC", "discovered_at": "2026-10-03T21:02:12.000Z" }, { "id": 151137, "urlhaus_id": "3927973", "url": "http://182.126.198.116:42118/bin.sh", "host": "182.126.198.116", "host_ip": "182.126.198.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 21:02:12 UTC", "discovered_at": "2026-10-03T21:02:12.000Z" }, { "id": 151136, "urlhaus_id": "3927972", "url": "http://60.23.239.10:57495/i", "host": "60.23.239.10", "host_ip": "60.23.239.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 21:02:12 UTC", "discovered_at": "2026-10-03T21:02:12.000Z" }, { "id": 151140, "urlhaus_id": "3927971", "url": "http://119.187.177.77:56649/bin.sh", "host": "119.187.177.77", "host_ip": "119.187.177.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 20:53:15 UTC", "discovered_at": "2026-10-03T20:53:15.000Z" }, { "id": 151141, "urlhaus_id": "3927970", "url": "http://59.180.162.251:35570/i", "host": "59.180.162.251", "host_ip": "59.180.162.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:47:28 UTC", "discovered_at": "2026-10-03T20:47:28.000Z" }, { "id": 151143, "urlhaus_id": "3927969", "url": "http://123.14.220.190:58479/i", "host": "123.14.220.190", "host_ip": "123.14.220.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:47:17 UTC", "discovered_at": "2026-10-03T20:47:17.000Z" }, { "id": 151142, "urlhaus_id": "3927968", "url": "http://182.90.70.196:42037/i", "host": "182.90.70.196", "host_ip": "182.90.70.196", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 20:47:17 UTC", "discovered_at": "2026-10-03T20:47:17.000Z" }, { "id": 151146, "urlhaus_id": "3927967", "url": "http://123.12.41.147:41710/i", "host": "123.12.41.147", "host_ip": "123.12.41.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:47:16 UTC", "discovered_at": "2026-10-03T20:47:16.000Z" }, { "id": 151145, "urlhaus_id": "3927966", "url": "http://115.59.233.233:39684/i", "host": "115.59.233.233", "host_ip": "115.59.233.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 20:47:16 UTC", "discovered_at": "2026-10-03T20:47:16.000Z" }, { "id": 151144, "urlhaus_id": "3927965", "url": "http://113.237.229.195:45389/i", "host": "113.237.229.195", "host_ip": "113.237.229.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:47:16 UTC", "discovered_at": "2026-10-03T20:47:16.000Z" }, { "id": 151147, "urlhaus_id": "3927964", "url": "http://193.178.158.57/bin/bc116af5e724cfa4_zx.exe", "host": "193.178.158.57", "host_ip": "193.178.158.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-03 20:45:17 UTC", "discovered_at": "2026-10-03T20:45:17.000Z" }, { "id": 151148, "urlhaus_id": "3927963", "url": "http://60.23.239.10:57495/bin.sh", "host": "60.23.239.10", "host_ip": "60.23.239.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:32:16 UTC", "discovered_at": "2026-10-03T20:32:16.000Z" }, { "id": 151149, "urlhaus_id": "3927962", "url": "http://222.127.55.82:54333/i", "host": "222.127.55.82", "host_ip": "222.127.55.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 20:32:15 UTC", "discovered_at": "2026-10-03T20:32:15.000Z" }, { "id": 151151, "urlhaus_id": "3927961", "url": "http://119.178.218.102:42472/i", "host": "119.178.218.102", "host_ip": "119.178.218.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 20:32:14 UTC", "discovered_at": "2026-10-03T20:32:14.000Z" }, { "id": 151150, "urlhaus_id": "3927960", "url": "http://123.190.163.197:50994/i", "host": "123.190.163.197", "host_ip": "123.190.163.197", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:32:14 UTC", "discovered_at": "2026-10-03T20:32:14.000Z" }, { "id": 151153, "urlhaus_id": "3927959", "url": "http://182.117.35.19:43635/bin.sh", "host": "182.117.35.19", "host_ip": "182.117.35.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:32:13 UTC", "discovered_at": "2026-10-03T20:32:13.000Z" }, { "id": 151152, "urlhaus_id": "3927958", "url": "http://61.53.127.174:39508/bin.sh", "host": "61.53.127.174", "host_ip": "61.53.127.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:32:13 UTC", "discovered_at": "2026-10-03T20:32:13.000Z" }, { "id": 151154, "urlhaus_id": "3927957", "url": "http://185.233.94.151:29366/bin.sh", "host": "185.233.94.151", "host_ip": "185.233.94.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:32:12 UTC", "discovered_at": "2026-10-03T20:32:12.000Z" }, { "id": 151155, "urlhaus_id": "3927956", "url": "http://180.245.42.218:56938/i", "host": "180.245.42.218", "host_ip": "180.245.42.218", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 20:27:28 UTC", "discovered_at": "2026-10-03T20:27:28.000Z" }, { "id": 151156, "urlhaus_id": "3927955", "url": "http://180.190.85.135:55948/i", "host": "180.190.85.135", "host_ip": "180.190.85.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 20:18:23 UTC", "discovered_at": "2026-10-03T20:18:23.000Z" }, { "id": 151157, "urlhaus_id": "3927954", "url": "http://113.237.229.195:45389/bin.sh", "host": "113.237.229.195", "host_ip": "113.237.229.195", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:17:23 UTC", "discovered_at": "2026-10-03T20:17:23.000Z" }, { "id": 151158, "urlhaus_id": "3927953", "url": "http://42.232.88.230:54336/i", "host": "42.232.88.230", "host_ip": "42.232.88.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:17:18 UTC", "discovered_at": "2026-10-03T20:17:18.000Z" }, { "id": 151160, "urlhaus_id": "3927952", "url": "http://116.139.178.77:56620/i", "host": "116.139.178.77", "host_ip": "116.139.178.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:17:17 UTC", "discovered_at": "2026-10-03T20:17:17.000Z" }, { "id": 151159, "urlhaus_id": "3927951", "url": "http://220.201.74.15:44269/i", "host": "220.201.74.15", "host_ip": "220.201.74.15", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:17:17 UTC", "discovered_at": "2026-10-03T20:17:17.000Z" }, { "id": 151162, "urlhaus_id": "3927950", "url": "http://182.119.218.104:59628/i", "host": "182.119.218.104", "host_ip": "182.119.218.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:17:16 UTC", "discovered_at": "2026-10-03T20:17:16.000Z" }, { "id": 151161, "urlhaus_id": "3927949", "url": "http://163.142.77.164:43172/i", "host": "163.142.77.164", "host_ip": "163.142.77.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:17:16 UTC", "discovered_at": "2026-10-03T20:17:16.000Z" }, { "id": 151163, "urlhaus_id": "3927948", "url": "http://182.117.25.207:40382/i", "host": "182.117.25.207", "host_ip": "182.117.25.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 20:03:15 UTC", "discovered_at": "2026-10-03T20:03:15.000Z" }, { "id": 151164, "urlhaus_id": "3927947", "url": "http://1.62.94.126:45713/i", "host": "1.62.94.126", "host_ip": "1.62.94.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 20:02:33 UTC", "discovered_at": "2026-10-03T20:02:33.000Z" }, { "id": 151165, "urlhaus_id": "3927946", "url": "http://42.224.81.248:46311/bin.sh", "host": "42.224.81.248", "host_ip": "42.224.81.248", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 20:02:14 UTC", "discovered_at": "2026-10-03T20:02:14.000Z" }, { "id": 151166, "urlhaus_id": "3927945", "url": "http://180.190.85.135:55948/bin.sh", "host": "180.190.85.135", "host_ip": "180.190.85.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 19:49:25 UTC", "discovered_at": "2026-10-03T19:49:25.000Z" }, { "id": 151167, "urlhaus_id": "3927944", "url": "http://186.149.204.12:45403/i", "host": "186.149.204.12", "host_ip": "186.149.204.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 19:47:17 UTC", "discovered_at": "2026-10-03T19:47:17.000Z" }, { "id": 151169, "urlhaus_id": "3927943", "url": "http://120.84.212.143:58330/i", "host": "120.84.212.143", "host_ip": "120.84.212.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 19:47:16 UTC", "discovered_at": "2026-10-03T19:47:16.000Z" }, { "id": 151168, "urlhaus_id": "3927942", "url": "http://222.127.154.221:48304/i", "host": "222.127.154.221", "host_ip": "222.127.154.221", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 19:47:16 UTC", "discovered_at": "2026-10-03T19:47:16.000Z" }, { "id": 151170, "urlhaus_id": "3927941", "url": "http://115.206.54.233:48161/i", "host": "115.206.54.233", "host_ip": "115.206.54.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 19:39:18 UTC", "discovered_at": "2026-10-03T19:39:18.000Z" }, { "id": 151171, "urlhaus_id": "3927940", "url": "http://115.206.54.233:48161/bin.sh", "host": "115.206.54.233", "host_ip": "115.206.54.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 19:36:32 UTC", "discovered_at": "2026-10-03T19:36:32.000Z" }, { "id": 151172, "urlhaus_id": "3927939", "url": "http://115.48.51.162:45265/bin.sh", "host": "115.48.51.162", "host_ip": "115.48.51.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 19:32:17 UTC", "discovered_at": "2026-10-03T19:32:17.000Z" }, { "id": 151177, "urlhaus_id": "3927938", "url": "http://182.117.25.207:40382/bin.sh", "host": "182.117.25.207", "host_ip": "182.117.25.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 19:32:16 UTC", "discovered_at": "2026-10-03T19:32:16.000Z" }, { "id": 151176, "urlhaus_id": "3927937", "url": "http://123.4.244.246:59572/bin.sh", "host": "123.4.244.246", "host_ip": "123.4.244.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 19:32:16 UTC", "discovered_at": "2026-10-03T19:32:16.000Z" }, { "id": 151175, "urlhaus_id": "3927936", "url": "http://182.127.179.138:47237/i", "host": "182.127.179.138", "host_ip": "182.127.179.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 19:32:16 UTC", "discovered_at": "2026-10-03T19:32:16.000Z" }, { "id": 151174, "urlhaus_id": "3927935", "url": "http://110.227.209.99:50570/i", "host": "110.227.209.99", "host_ip": "110.227.209.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 19:32:16 UTC", "discovered_at": "2026-10-03T19:32:16.000Z" }, { "id": 151173, "urlhaus_id": "3927934", "url": "http://123.129.135.105:49561/i", "host": "123.129.135.105", "host_ip": "123.129.135.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 19:32:16 UTC", "discovered_at": "2026-10-03T19:32:16.000Z" }, { "id": 151178, "urlhaus_id": "3927933", "url": "http://115.62.38.108:51819/i", "host": "115.62.38.108", "host_ip": "115.62.38.108", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 19:17:15 UTC", "discovered_at": "2026-10-03T19:17:15.000Z" }, { "id": 151179, "urlhaus_id": "3927932", "url": "http://115.63.83.136:59187/bin.sh", "host": "115.63.83.136", "host_ip": "115.63.83.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 19:17:14 UTC", "discovered_at": "2026-10-03T19:17:14.000Z" }, { "id": 151180, "urlhaus_id": "3927931", "url": "http://180.191.32.197:43434/i", "host": "180.191.32.197", "host_ip": "180.191.32.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 19:12:20 UTC", "discovered_at": "2026-10-03T19:12:20.000Z" }, { "id": 151181, "urlhaus_id": "3927930", "url": "http://123.13.118.144:45781/i", "host": "123.13.118.144", "host_ip": "123.13.118.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 19:09:28 UTC", "discovered_at": "2026-10-03T19:09:28.000Z" }, { "id": 151183, "urlhaus_id": "3927929", "url": "http://180.190.203.41:53547/i", "host": "180.190.203.41", "host_ip": "180.190.203.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 19:01:15 UTC", "discovered_at": "2026-10-03T19:01:15.000Z" }, { "id": 151182, "urlhaus_id": "3927928", "url": "http://150.255.33.157:56929/i", "host": "150.255.33.157", "host_ip": "150.255.33.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 19:01:15 UTC", "discovered_at": "2026-10-03T19:01:15.000Z" }, { "id": 151184, "urlhaus_id": "3927927", "url": "http://222.127.71.33:33166/i", "host": "222.127.71.33", "host_ip": "222.127.71.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 19:01:14 UTC", "discovered_at": "2026-10-03T19:01:14.000Z" }, { "id": 149465, "urlhaus_id": "3927926", "url": "http://120.28.196.74:60042/i", "host": "120.28.196.74", "host_ip": "120.28.196.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 18:53:25 UTC", "discovered_at": "2026-10-03T18:53:25.000Z" }, { "id": 149466, "urlhaus_id": "3927925", "url": "http://120.28.196.74:60042/bin.sh", "host": "120.28.196.74", "host_ip": "120.28.196.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 18:52:15 UTC", "discovered_at": "2026-10-03T18:52:15.000Z" }, { "id": 149467, "urlhaus_id": "3927924", "url": "http://182.124.23.70:52164/i", "host": "182.124.23.70", "host_ip": "182.124.23.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 18:46:13 UTC", "discovered_at": "2026-10-03T18:46:13.000Z" }, { "id": 149468, "urlhaus_id": "3927923", "url": "http://123.13.118.144:45781/bin.sh", "host": "123.13.118.144", "host_ip": "123.13.118.144", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 18:34:30 UTC", "discovered_at": "2026-10-03T18:34:30.000Z" }, { "id": 149469, "urlhaus_id": "3927922", "url": "http://42.230.36.234:55546/bin.sh", "host": "42.230.36.234", "host_ip": "42.230.36.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 18:32:16 UTC", "discovered_at": "2026-10-03T18:32:16.000Z" }, { "id": 149470, "urlhaus_id": "3927921", "url": "http://42.230.36.234:55546/i", "host": "42.230.36.234", "host_ip": "42.230.36.234", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 18:32:14 UTC", "discovered_at": "2026-10-03T18:32:14.000Z" }, { "id": 149472, "urlhaus_id": "3927920", "url": "http://120.28.153.108:45634/i", "host": "120.28.153.108", "host_ip": "120.28.153.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 18:32:13 UTC", "discovered_at": "2026-10-03T18:32:13.000Z" }, { "id": 149471, "urlhaus_id": "3927919", "url": "http://190.109.227.228:43465/i", "host": "190.109.227.228", "host_ip": "190.109.227.228", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 18:32:13 UTC", "discovered_at": "2026-10-03T18:32:13.000Z" }, { "id": 149473, "urlhaus_id": "3927918", "url": "http://121.231.177.197:51491/i", "host": "121.231.177.197", "host_ip": "121.231.177.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 18:17:31 UTC", "discovered_at": "2026-10-03T18:17:31.000Z" }, { "id": 149474, "urlhaus_id": "3927917", "url": "http://123.129.130.101:32990/i", "host": "123.129.130.101", "host_ip": "123.129.130.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 18:17:17 UTC", "discovered_at": "2026-10-03T18:17:17.000Z" }, { "id": 149475, "urlhaus_id": "3927916", "url": "http://101.108.134.155:35666/i", "host": "101.108.134.155", "host_ip": "101.108.134.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 18:17:15 UTC", "discovered_at": "2026-10-03T18:17:15.000Z" }, { "id": 149476, "urlhaus_id": "3927915", "url": "http://115.56.156.34:51261/i", "host": "115.56.156.34", "host_ip": "115.56.156.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 18:03:15 UTC", "discovered_at": "2026-10-03T18:03:15.000Z" }, { "id": 149477, "urlhaus_id": "3927914", "url": "http://219.155.130.219:38961/i", "host": "219.155.130.219", "host_ip": "219.155.130.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 18:02:14 UTC", "discovered_at": "2026-10-03T18:02:14.000Z" }, { "id": 149479, "urlhaus_id": "3927913", "url": "http://39.90.148.38:35621/i", "host": "39.90.148.38", "host_ip": "39.90.148.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 18:02:13 UTC", "discovered_at": "2026-10-03T18:02:13.000Z" }, { "id": 149478, "urlhaus_id": "3927912", "url": "http://60.18.84.94:57993/i", "host": "60.18.84.94", "host_ip": "60.18.84.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 18:02:13 UTC", "discovered_at": "2026-10-03T18:02:13.000Z" }, { "id": 149480, "urlhaus_id": "3927911", "url": "http://117.26.225.62:56779/i", "host": "117.26.225.62", "host_ip": "117.26.225.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:48:01 UTC", "discovered_at": "2026-10-03T17:48:01.000Z" }, { "id": 149481, "urlhaus_id": "3927910", "url": "http://101.108.134.155:35666/bin.sh", "host": "101.108.134.155", "host_ip": "101.108.134.155", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:47:15 UTC", "discovered_at": "2026-10-03T17:47:15.000Z" }, { "id": 149482, "urlhaus_id": "3927909", "url": "http://94.156.166.167:47795/i", "host": "94.156.166.167", "host_ip": "94.156.166.167", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:47:13 UTC", "discovered_at": "2026-10-03T17:47:13.000Z" }, { "id": 149483, "urlhaus_id": "3927908", "url": "http://chibomaydan.devs.surf/mips", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:27 UTC", "discovered_at": "2026-10-03T17:42:27.000Z" }, { "id": 149485, "urlhaus_id": "3927907", "url": "http://chibomaydan.devs.surf/m68k", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:24 UTC", "discovered_at": "2026-10-03T17:42:24.000Z" }, { "id": 149484, "urlhaus_id": "3927906", "url": "http://chibomaydan.devs.surf/debug.dbg", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:24 UTC", "discovered_at": "2026-10-03T17:42:24.000Z" }, { "id": 149494, "urlhaus_id": "3927905", "url": "http://chibomaydan.devs.surf/mpsl", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149493, "urlhaus_id": "3927904", "url": "http://chibomaydan.devs.surf/spc", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149492, "urlhaus_id": "3927903", "url": "http://chibomaydan.devs.surf/x86", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149491, "urlhaus_id": "3927902", "url": "http://chibomaydan.devs.surf/arm", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149490, "urlhaus_id": "3927901", "url": "http://chibomaydan.devs.surf/arm6", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149489, "urlhaus_id": "3927900", "url": "http://chibomaydan.devs.surf/sh4", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149488, "urlhaus_id": "3927899", "url": "http://chibomaydan.devs.surf/arm7", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149487, "urlhaus_id": "3927898", "url": "http://chibomaydan.devs.surf/ppc", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149486, "urlhaus_id": "3927897", "url": "http://chibomaydan.devs.surf/arm5", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:19 UTC", "discovered_at": "2026-10-03T17:42:19.000Z" }, { "id": 149495, "urlhaus_id": "3927896", "url": "http://chibomaydan.devs.surf/x86_64", "host": "chibomaydan.devs.surf", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:42:18 UTC", "discovered_at": "2026-10-03T17:42:18.000Z" }, { "id": 149497, "urlhaus_id": "3927895", "url": "http://150.40.98.36/mpsl", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:38:15 UTC", "discovered_at": "2026-10-03T17:38:15.000Z" }, { "id": 149496, "urlhaus_id": "3927894", "url": "http://150.40.98.36/arm5", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:38:15 UTC", "discovered_at": "2026-10-03T17:38:15.000Z" }, { "id": 149503, "urlhaus_id": "3927893", "url": "http://150.40.98.36/spc", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:37:24 UTC", "discovered_at": "2026-10-03T17:37:24.000Z" }, { "id": 149502, "urlhaus_id": "3927892", "url": "http://150.40.98.36/arm6", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:37:24 UTC", "discovered_at": "2026-10-03T17:37:24.000Z" }, { "id": 149501, "urlhaus_id": "3927891", "url": "http://150.40.98.36/mips", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:37:24 UTC", "discovered_at": "2026-10-03T17:37:24.000Z" }, { "id": 149500, "urlhaus_id": "3927890", "url": "http://150.40.98.36/ppc", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:37:24 UTC", "discovered_at": "2026-10-03T17:37:24.000Z" }, { "id": 149499, "urlhaus_id": "3927889", "url": "http://150.40.98.36/sh4", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:37:24 UTC", "discovered_at": "2026-10-03T17:37:24.000Z" }, { "id": 149498, "urlhaus_id": "3927888", "url": "http://150.40.98.36/m68k", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 17:37:24 UTC", "discovered_at": "2026-10-03T17:37:24.000Z" }, { "id": 149504, "urlhaus_id": "3927887", "url": "http://219.155.130.219:38961/bin.sh", "host": "219.155.130.219", "host_ip": "219.155.130.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 17:31:23 UTC", "discovered_at": "2026-10-03T17:31:23.000Z" }, { "id": 149507, "urlhaus_id": "3927886", "url": "http://115.56.156.34:51261/bin.sh", "host": "115.56.156.34", "host_ip": "115.56.156.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 17:31:20 UTC", "discovered_at": "2026-10-03T17:31:20.000Z" }, { "id": 149506, "urlhaus_id": "3927885", "url": "http://182.121.156.99:50775/i", "host": "182.121.156.99", "host_ip": "182.121.156.99", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 17:31:20 UTC", "discovered_at": "2026-10-03T17:31:20.000Z" }, { "id": 149505, "urlhaus_id": "3927884", "url": "http://27.193.159.57:34915/i", "host": "27.193.159.57", "host_ip": "27.193.159.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 17:31:20 UTC", "discovered_at": "2026-10-03T17:31:20.000Z" }, { "id": 149508, "urlhaus_id": "3927883", "url": "http://89.163.157.131:8080/arm7", "host": "89.163.157.131", "host_ip": "89.163.157.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:31:19 UTC", "discovered_at": "2026-10-03T17:31:19.000Z" }, { "id": 149510, "urlhaus_id": "3927882", "url": "http://91.92.242.236/files-129312398/files/file_87b6b45e37f32bcb.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-03 17:30:37 UTC", "discovered_at": "2026-10-03T17:30:37.000Z" }, { "id": 149509, "urlhaus_id": "3927881", "url": "https://github.com/zav001/D3et2t23y3/releases/download/v3t354/GoobaaClient.1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:37 UTC", "discovered_at": "2026-10-03T17:30:37.000Z" }, { "id": 149511, "urlhaus_id": "3927880", "url": "https://github.com/niehgns/hi1/raw/refs/heads/main/frostclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:36 UTC", "discovered_at": "2026-10-03T17:30:36.000Z" }, { "id": 149513, "urlhaus_id": "3927879", "url": "https://donutclients.org/assets/jars/MeteorClient.jar", "host": "donutclients.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:35 UTC", "discovered_at": "2026-10-03T17:30:35.000Z" }, { "id": 149512, "urlhaus_id": "3927878", "url": "http://185.213.240.64/mips", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:35 UTC", "discovered_at": "2026-10-03T17:30:35.000Z" }, { "id": 149519, "urlhaus_id": "3927877", "url": "http://185.213.240.64/android_arm64", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:33 UTC", "discovered_at": "2026-10-03T17:30:33.000Z" }, { "id": 149518, "urlhaus_id": "3927876", "url": "http://185.213.240.64/mipsle", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:33 UTC", "discovered_at": "2026-10-03T17:30:33.000Z" }, { "id": 149517, "urlhaus_id": "3927875", "url": "http://185.213.240.64/x86", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:33 UTC", "discovered_at": "2026-10-03T17:30:33.000Z" }, { "id": 149516, "urlhaus_id": "3927874", "url": "http://185.213.240.64/i386", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:33 UTC", "discovered_at": "2026-10-03T17:30:33.000Z" }, { "id": 149515, "urlhaus_id": "3927873", "url": "https://donutsmp-mod.github.io/mods/mod.jar", "host": "donutsmp-mod.github.io", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:33 UTC", "discovered_at": "2026-10-03T17:30:33.000Z" }, { "id": 149514, "urlhaus_id": "3927872", "url": "http://112.198.128.164:52598/bin.sh", "host": "112.198.128.164", "host_ip": "112.198.128.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 17:30:33 UTC", "discovered_at": "2026-10-03T17:30:33.000Z" }, { "id": 149522, "urlhaus_id": "3927871", "url": "http://185.213.240.64/amd64", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:30:31 UTC", "discovered_at": "2026-10-03T17:30:31.000Z" }, { "id": 149521, "urlhaus_id": "3927870", "url": "https://donutclients.org/assets/jars/67Client.jar", "host": "donutclients.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:31 UTC", "discovered_at": "2026-10-03T17:30:31.000Z" }, { "id": 149520, "urlhaus_id": "3927869", "url": "https://donutclients.org/assets/jars/KryptonClient.jar", "host": "donutclients.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:31 UTC", "discovered_at": "2026-10-03T17:30:31.000Z" }, { "id": 149523, "urlhaus_id": "3927868", "url": "https://www.dropbox.com/scl/fi/3paaa1gyot2ezrsj2qudh/nightclient-1.21.4-n-15.jar?rlkey=4aktrmvwb3wqs6w7f3mwp4ury&st=hi9k78el&dl=1", "host": "www.dropbox.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:30 UTC", "discovered_at": "2026-10-03T17:30:30.000Z" }, { "id": 149525, "urlhaus_id": "3927867", "url": "http://185.213.240.64/bot.exe", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 17:30:29 UTC", "discovered_at": "2026-10-03T17:30:29.000Z" }, { "id": 149524, "urlhaus_id": "3927866", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/svchost.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe", "last_online": null, "first_seen": "2026-10-03 17:30:29 UTC", "discovered_at": "2026-10-03T17:30:29.000Z" }, { "id": 149527, "urlhaus_id": "3927865", "url": "https://donutclients.org/assets/jars/GlazedAddon.jar", "host": "donutclients.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:28 UTC", "discovered_at": "2026-10-03T17:30:28.000Z" }, { "id": 149526, "urlhaus_id": "3927864", "url": "https://donutclients.org/assets/jars/RadiumClient.jar", "host": "donutclients.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:28 UTC", "discovered_at": "2026-10-03T17:30:28.000Z" }, { "id": 149532, "urlhaus_id": "3927863", "url": "https://allowcsxan2.site/js/all.min.js", "host": "allowcsxan2.site", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClearFake, EtherHiding", "last_online": null, "first_seen": "2026-10-03 17:30:27 UTC", "discovered_at": "2026-10-03T17:30:27.000Z" }, { "id": 149531, "urlhaus_id": "3927862", "url": "https://donutclients.org/assets/jars/Opsec.jar", "host": "donutclients.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:27 UTC", "discovered_at": "2026-10-03T17:30:27.000Z" }, { "id": 149530, "urlhaus_id": "3927861", "url": "https://donutclients.org/assets/jars/4EClient.jar", "host": "donutclients.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:27 UTC", "discovered_at": "2026-10-03T17:30:27.000Z" }, { "id": 149529, "urlhaus_id": "3927860", "url": "http://80.67.33.209:45942/Mozi.a", "host": "80.67.33.209", "host_ip": "80.67.33.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 17:30:27 UTC", "discovered_at": "2026-10-03T17:30:27.000Z" }, { "id": 149528, "urlhaus_id": "3927859", "url": "https://github.com/niehgns/hi2/raw/refs/heads/main/fakepayclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:30:27 UTC", "discovered_at": "2026-10-03T17:30:27.000Z" }, { "id": 149534, "urlhaus_id": "3927858", "url": "https://chekcms432.cc/js/all.min.js", "host": "chekcms432.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClearFake, EtherHiding", "last_online": null, "first_seen": "2026-10-03 17:30:26 UTC", "discovered_at": "2026-10-03T17:30:26.000Z" }, { "id": 149533, "urlhaus_id": "3927857", "url": "http://185.213.240.64/arm5", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:26 UTC", "discovered_at": "2026-10-03T17:30:26.000Z" }, { "id": 149535, "urlhaus_id": "3927856", "url": "http://185.213.240.64/arm64", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:24 UTC", "discovered_at": "2026-10-03T17:30:24.000Z" }, { "id": 149539, "urlhaus_id": "3927855", "url": "http://182.34.59.182:33687/Mozi.m", "host": "182.34.59.182", "host_ip": "182.34.59.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:30:23 UTC", "discovered_at": "2026-10-03T17:30:23.000Z" }, { "id": 149538, "urlhaus_id": "3927854", "url": "http://185.213.240.64/arm", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:23 UTC", "discovered_at": "2026-10-03T17:30:23.000Z" }, { "id": 149537, "urlhaus_id": "3927853", "url": "http://185.213.240.64/arm6", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:30:23 UTC", "discovered_at": "2026-10-03T17:30:23.000Z" }, { "id": 149536, "urlhaus_id": "3927852", "url": "http://185.213.240.64/armv7l", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 17:30:23 UTC", "discovered_at": "2026-10-03T17:30:23.000Z" }, { "id": 149540, "urlhaus_id": "3927851", "url": "http://196.189.197.131:59809/bin.sh", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-03 17:30:21 UTC", "discovered_at": "2026-10-03T17:30:21.000Z" }, { "id": 149541, "urlhaus_id": "3927850", "url": "https://tmpfiles.org/dl/1791048429.d0f1a0128fdbc731/wyAXe28fkSr2/mko-win1.exe", "host": "tmpfiles.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsynRat, exe, rat", "last_online": null, "first_seen": "2026-10-03 17:30:19 UTC", "discovered_at": "2026-10-03T17:30:19.000Z" }, { "id": 149542, "urlhaus_id": "3927849", "url": "https://onlyfiles.com/dl/1791036710.c66fbf974014a589/wswKwN6UcfRn/svchost-32bit.exe", "host": "onlyfiles.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-03 17:30:13 UTC", "discovered_at": "2026-10-03T17:30:13.000Z" }, { "id": 149543, "urlhaus_id": "3927848", "url": "http://89.163.157.131:8080/load.sh", "host": "89.163.157.131", "host_ip": "89.163.157.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 17:30:12 UTC", "discovered_at": "2026-10-03T17:30:12.000Z" }, { "id": 149544, "urlhaus_id": "3927847", "url": "https://github.com/niehgns/hi1/raw/refs/heads/main/zyronclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:26 UTC", "discovered_at": "2026-10-03T17:29:26.000Z" }, { "id": 149547, "urlhaus_id": "3927846", "url": "https://github.com/niehgns/hi/raw/refs/heads/main/goobaclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:23 UTC", "discovered_at": "2026-10-03T17:29:23.000Z" }, { "id": 149546, "urlhaus_id": "3927845", "url": "https://github.com/niehgns/hi2/raw/refs/heads/main/67client-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:23 UTC", "discovered_at": "2026-10-03T17:29:23.000Z" }, { "id": 149545, "urlhaus_id": "3927844", "url": "https://kryptonclientplus.lovable.app/__l5e/assets-v1/9e03eb56-6178-4d83-a5ac-8f83d28e0c71/KryptonClient1.21.11.jar", "host": "kryptonclientplus.lovable.app", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:23 UTC", "discovered_at": "2026-10-03T17:29:23.000Z" }, { "id": 149551, "urlhaus_id": "3927843", "url": "https://github.com/niehgns/hi/raw/refs/heads/main/kryptonclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:22 UTC", "discovered_at": "2026-10-03T17:29:22.000Z" }, { "id": 149550, "urlhaus_id": "3927842", "url": "https://donutsmpclient.com/__l5e/assets-v1/017d55c0-0782-46de-8b6d-3513bef2479e/GoobaClient-1.21.11.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:22 UTC", "discovered_at": "2026-10-03T17:29:22.000Z" }, { "id": 149549, "urlhaus_id": "3927841", "url": "https://github.com/niehgns/hi2/raw/refs/heads/main/dqrkisclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:22 UTC", "discovered_at": "2026-10-03T17:29:22.000Z" }, { "id": 149548, "urlhaus_id": "3927840", "url": "https://donutsmpclient.com/__l5e/assets-v1/49bd0b3d-4f1c-4bd2-bc39-4796957a9b35/FrostClientV2-1.21.11.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:22 UTC", "discovered_at": "2026-10-03T17:29:22.000Z" }, { "id": 149552, "urlhaus_id": "3927839", "url": "http://176.65.139.136/cat/dl.sh", "host": "176.65.139.136", "host_ip": "176.65.139.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "sh, ssh", "last_online": null, "first_seen": "2026-10-03 17:29:21 UTC", "discovered_at": "2026-10-03T17:29:21.000Z" }, { "id": 149553, "urlhaus_id": "3927838", "url": "https://github.com/niehgns/hi2/raw/refs/heads/main/4eclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:18 UTC", "discovered_at": "2026-10-03T17:29:18.000Z" }, { "id": 149554, "urlhaus_id": "3927837", "url": "https://github.com/niehgns/hi2/raw/refs/heads/main/radiumclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:17 UTC", "discovered_at": "2026-10-03T17:29:17.000Z" }, { "id": 149555, "urlhaus_id": "3927836", "url": "https://donutsmpclient.com/__l5e/assets-v1/c03fba1e-47b9-42d6-aa75-19198316c380/WaterClientV6-1.21.11.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:15 UTC", "discovered_at": "2026-10-03T17:29:15.000Z" }, { "id": 149557, "urlhaus_id": "3927835", "url": "https://github.com/niehgns/hi2/raw/refs/heads/main/xenonclient-1.21.11.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:14 UTC", "discovered_at": "2026-10-03T17:29:14.000Z" }, { "id": 149556, "urlhaus_id": "3927834", "url": "https://donutsmpclient.com/__l5e/assets-v1/e8c76875-4486-4d5b-8d84-045db0239456/FakeClientV3-1.21.11.jar", "host": "donutsmpclient.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SilentNet", "last_online": null, "first_seen": "2026-10-03 17:29:14 UTC", "discovered_at": "2026-10-03T17:29:14.000Z" }, { "id": 149558, "urlhaus_id": "3927833", "url": "http://91.92.242.236/files-129312398/files/file_9872326df8da56c9.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-03 17:29:10 UTC", "discovered_at": "2026-10-03T17:29:10.000Z" }, { "id": 149559, "urlhaus_id": "3927832", "url": "http://222.243.95.50:45722/bin.sh", "host": "222.243.95.50", "host_ip": "222.243.95.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 17:18:23 UTC", "discovered_at": "2026-10-03T17:18:23.000Z" }, { "id": 149560, "urlhaus_id": "3927831", "url": "http://117.26.225.62:56779/bin.sh", "host": "117.26.225.62", "host_ip": "117.26.225.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:17:39 UTC", "discovered_at": "2026-10-03T17:17:39.000Z" }, { "id": 149561, "urlhaus_id": "3927830", "url": "http://119.117.164.243:35036/i", "host": "119.117.164.243", "host_ip": "119.117.164.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 17:17:15 UTC", "discovered_at": "2026-10-03T17:17:15.000Z" }, { "id": 149562, "urlhaus_id": "3927829", "url": "http://114.226.82.134:35118/i", "host": "114.226.82.134", "host_ip": "114.226.82.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 17:11:23 UTC", "discovered_at": "2026-10-03T17:11:23.000Z" }, { "id": 149563, "urlhaus_id": "3927828", "url": "http://59.180.145.40:55956/i", "host": "59.180.145.40", "host_ip": "59.180.145.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 17:07:44 UTC", "discovered_at": "2026-10-03T17:07:44.000Z" }, { "id": 149564, "urlhaus_id": "3927827", "url": "http://122.234.93.189:47036/i", "host": "122.234.93.189", "host_ip": "122.234.93.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 17:02:16 UTC", "discovered_at": "2026-10-03T17:02:16.000Z" }, { "id": 149569, "urlhaus_id": "3927826", "url": "http://60.18.84.94:57993/bin.sh", "host": "60.18.84.94", "host_ip": "60.18.84.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 17:02:14 UTC", "discovered_at": "2026-10-03T17:02:14.000Z" }, { "id": 149568, "urlhaus_id": "3927825", "url": "http://27.215.124.85:40583/i", "host": "27.215.124.85", "host_ip": "27.215.124.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 17:02:14 UTC", "discovered_at": "2026-10-03T17:02:14.000Z" }, { "id": 149567, "urlhaus_id": "3927824", "url": "http://115.52.179.133:51388/bin.sh", "host": "115.52.179.133", "host_ip": "115.52.179.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 17:02:14 UTC", "discovered_at": "2026-10-03T17:02:14.000Z" }, { "id": 149566, "urlhaus_id": "3927823", "url": "http://221.15.15.36:50558/bin.sh", "host": "221.15.15.36", "host_ip": "221.15.15.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 17:02:14 UTC", "discovered_at": "2026-10-03T17:02:14.000Z" }, { "id": 149565, "urlhaus_id": "3927822", "url": "http://221.15.15.36:50558/i", "host": "221.15.15.36", "host_ip": "221.15.15.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 17:02:14 UTC", "discovered_at": "2026-10-03T17:02:14.000Z" }, { "id": 149570, "urlhaus_id": "3927821", "url": "http://27.193.159.57:34915/bin.sh", "host": "27.193.159.57", "host_ip": "27.193.159.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 17:02:12 UTC", "discovered_at": "2026-10-03T17:02:12.000Z" }, { "id": 149571, "urlhaus_id": "3927820", "url": "http://114.226.82.134:35118/bin.sh", "host": "114.226.82.134", "host_ip": "114.226.82.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 16:56:20 UTC", "discovered_at": "2026-10-03T16:56:20.000Z" }, { "id": 149572, "urlhaus_id": "3927819", "url": "http://23.155.44.87/bot.m68k", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:51:30 UTC", "discovered_at": "2026-10-03T16:51:30.000Z" }, { "id": 149573, "urlhaus_id": "3927818", "url": "http://23.155.44.87/bot.sh4", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:51:25 UTC", "discovered_at": "2026-10-03T16:51:25.000Z" }, { "id": 149574, "urlhaus_id": "3927817", "url": "http://5.175.192.52/bot.py", "host": "5.175.192.52", "host_ip": "5.175.192.52", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, py, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:51:16 UTC", "discovered_at": "2026-10-03T16:51:16.000Z" }, { "id": 149576, "urlhaus_id": "3927816", "url": "http://104.168.4.206/dissx86", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:29 UTC", "discovered_at": "2026-10-03T16:50:29.000Z" }, { "id": 149575, "urlhaus_id": "3927815", "url": "http://104.168.4.206/adissarm5", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:29 UTC", "discovered_at": "2026-10-03T16:50:29.000Z" }, { "id": 149588, "urlhaus_id": "3927814", "url": "http://104.168.4.206/dissarm4", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149587, "urlhaus_id": "3927813", "url": "http://104.168.4.206/dissmips", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149586, "urlhaus_id": "3927812", "url": "http://104.168.4.206/disssh4", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149585, "urlhaus_id": "3927811", "url": "http://104.168.4.206/dissarm7", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149584, "urlhaus_id": "3927810", "url": "http://104.168.4.206/dissarm6", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, gafgyt, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149583, "urlhaus_id": "3927809", "url": "http://104.168.4.206/dissmpsl", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149582, "urlhaus_id": "3927808", "url": "http://23.155.44.87/bot.mpsl", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149581, "urlhaus_id": "3927807", "url": "http://23.155.44.87/bot.ppc", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149580, "urlhaus_id": "3927806", "url": "http://23.155.44.87/bot.arm", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149579, "urlhaus_id": "3927805", "url": "http://23.155.44.87/bot.mips", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149578, "urlhaus_id": "3927804", "url": "http://23.155.44.87/bot.arm6", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149577, "urlhaus_id": "3927803", "url": "http://23.155.44.87/bot.arm5", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:22 UTC", "discovered_at": "2026-10-03T16:50:22.000Z" }, { "id": 149590, "urlhaus_id": "3927802", "url": "http://23.155.44.87/bot.i686", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:16 UTC", "discovered_at": "2026-10-03T16:50:16.000Z" }, { "id": 149589, "urlhaus_id": "3927801", "url": "http://62.171.129.249/huhu/titanjr", "host": "62.171.129.249", "host_ip": "62.171.129.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:16 UTC", "discovered_at": "2026-10-03T16:50:16.000Z" }, { "id": 149592, "urlhaus_id": "3927800", "url": "http://23.155.44.87/bot.arc", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:14 UTC", "discovered_at": "2026-10-03T16:50:14.000Z" }, { "id": 149591, "urlhaus_id": "3927799", "url": "http://23.155.44.87/bot.spc", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:50:14 UTC", "discovered_at": "2026-10-03T16:50:14.000Z" }, { "id": 149594, "urlhaus_id": "3927798", "url": "http://23.155.44.87/bot.x86", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:32 UTC", "discovered_at": "2026-10-03T16:49:32.000Z" }, { "id": 149593, "urlhaus_id": "3927797", "url": "http://62.171.129.249/all.sh", "host": "62.171.129.249", "host_ip": "62.171.129.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:32 UTC", "discovered_at": "2026-10-03T16:49:32.000Z" }, { "id": 149604, "urlhaus_id": "3927796", "url": "http://89.185.82.24/o", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149603, "urlhaus_id": "3927795", "url": "http://89.185.82.24/a", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149602, "urlhaus_id": "3927794", "url": "http://176.65.139.242:8080/b", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149601, "urlhaus_id": "3927793", "url": "http://176.65.139.242/b", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149600, "urlhaus_id": "3927792", "url": "http://104.168.4.206/bins.sh", "host": "104.168.4.206", "host_ip": "104.168.4.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, gafgyt, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149599, "urlhaus_id": "3927791", "url": "http://89.185.82.24/t", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149598, "urlhaus_id": "3927790", "url": "http://176.65.139.242:8080/wget.sh", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149597, "urlhaus_id": "3927789", "url": "http://176.65.139.242:8080/.Sx86", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149596, "urlhaus_id": "3927788", "url": "http://176.65.139.242:8080/.Sx86_64", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149595, "urlhaus_id": "3927787", "url": "http://176.65.139.242:8080/.Sarm7", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:31 UTC", "discovered_at": "2026-10-03T16:49:31.000Z" }, { "id": 149605, "urlhaus_id": "3927786", "url": "http://89.185.82.24/w", "host": "89.185.82.24", "host_ip": "89.185.82.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:29 UTC", "discovered_at": "2026-10-03T16:49:29.000Z" }, { "id": 149607, "urlhaus_id": "3927785", "url": "http://150.40.98.36/debug.dbg", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:26 UTC", "discovered_at": "2026-10-03T16:49:26.000Z" }, { "id": 149606, "urlhaus_id": "3927784", "url": "http://150.40.98.36/x86", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:26 UTC", "discovered_at": "2026-10-03T16:49:26.000Z" }, { "id": 149610, "urlhaus_id": "3927783", "url": "http://150.40.98.36/arm", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:24 UTC", "discovered_at": "2026-10-03T16:49:24.000Z" }, { "id": 149609, "urlhaus_id": "3927782", "url": "http://150.40.98.36/arm7", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:24 UTC", "discovered_at": "2026-10-03T16:49:24.000Z" }, { "id": 149608, "urlhaus_id": "3927781", "url": "http://150.40.98.36/x86_64", "host": "150.40.98.36", "host_ip": "150.40.98.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:24 UTC", "discovered_at": "2026-10-03T16:49:24.000Z" }, { "id": 149614, "urlhaus_id": "3927780", "url": "http://23.155.44.87/bot.arm7", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:22 UTC", "discovered_at": "2026-10-03T16:49:22.000Z" }, { "id": 149613, "urlhaus_id": "3927779", "url": "http://23.155.44.87/jaws", "host": "23.155.44.87", "host_ip": "23.155.44.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:22 UTC", "discovered_at": "2026-10-03T16:49:22.000Z" }, { "id": 149612, "urlhaus_id": "3927778", "url": "http://62.171.129.249/huhu/titanjr.x86_64", "host": "62.171.129.249", "host_ip": "62.171.129.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:22 UTC", "discovered_at": "2026-10-03T16:49:22.000Z" }, { "id": 149611, "urlhaus_id": "3927777", "url": "http://62.171.129.249/huhu/titanjr.arm7", "host": "62.171.129.249", "host_ip": "62.171.129.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:22 UTC", "discovered_at": "2026-10-03T16:49:22.000Z" }, { "id": 149615, "urlhaus_id": "3927776", "url": "http://5.175.192.52/payload.sh", "host": "5.175.192.52", "host_ip": "5.175.192.52", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:49:16 UTC", "discovered_at": "2026-10-03T16:49:16.000Z" }, { "id": 149616, "urlhaus_id": "3927775", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:47 UTC", "discovered_at": "2026-10-03T16:48:47.000Z" }, { "id": 149617, "urlhaus_id": "3927774", "url": "http://107.172.132.240/bins/linux-amd64", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:43 UTC", "discovered_at": "2026-10-03T16:48:43.000Z" }, { "id": 149631, "urlhaus_id": "3927773", "url": "http://107.172.132.240/bins/linux-ppc64", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149630, "urlhaus_id": "3927772", "url": "http://107.172.132.240/bins/linux-armv7", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149629, "urlhaus_id": "3927771", "url": "http://107.172.132.240/bins/linux-mips64le", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149628, "urlhaus_id": "3927770", "url": "http://107.172.132.240/bins/linux-arm", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149627, "urlhaus_id": "3927769", "url": "http://107.172.132.240/bins/linux-ppc64le", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149626, "urlhaus_id": "3927768", "url": "http://107.172.132.240/bins/linux-mips64", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149625, "urlhaus_id": "3927767", "url": "http://107.172.132.240/bins/linux-armv5", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149624, "urlhaus_id": "3927766", "url": "http://107.172.132.240/bins/linux-386", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149623, "urlhaus_id": "3927765", "url": "http://107.172.132.240/bins/linux-mips", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149622, "urlhaus_id": "3927764", "url": "http://107.172.132.240/bins/linux-arm64", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149621, "urlhaus_id": "3927763", "url": "http://107.172.132.240/bins/linux-armv6", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149620, "urlhaus_id": "3927762", "url": "http://107.172.132.240/bins/linux-s390x", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149619, "urlhaus_id": "3927761", "url": "http://107.172.132.240/bins/linux-riscv64", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149618, "urlhaus_id": "3927760", "url": "http://107.172.132.240/bins/linux-mipsle", "host": "107.172.132.240", "host_ip": "107.172.132.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, DDoSAgent, elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:42 UTC", "discovered_at": "2026-10-03T16:48:42.000Z" }, { "id": 149639, "urlhaus_id": "3927759", "url": "http://178.132.198.200/bins/vcimanagement.mips", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149638, "urlhaus_id": "3927758", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149637, "urlhaus_id": "3927757", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149636, "urlhaus_id": "3927756", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149635, "urlhaus_id": "3927755", "url": "http://178.132.198.200/bins/vcimanagement.arm7", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149634, "urlhaus_id": "3927754", "url": "http://178.132.198.200/bins/vcimanagement.arm6", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149633, "urlhaus_id": "3927753", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnsh2xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149632, "urlhaus_id": "3927752", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnor1kxnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:34 UTC", "discovered_at": "2026-10-03T16:48:34.000Z" }, { "id": 149653, "urlhaus_id": "3927751", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149652, "urlhaus_id": "3927750", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149651, "urlhaus_id": "3927749", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnm68kxnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149650, "urlhaus_id": "3927748", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnmipsxnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149649, "urlhaus_id": "3927747", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnsh4xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149648, "urlhaus_id": "3927746", "url": "http://178.132.198.200/bins/vcimanagement.x86", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149647, "urlhaus_id": "3927745", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxni386xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, gafgyt, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149646, "urlhaus_id": "3927744", "url": "http://178.132.198.200/bins/vcimanagement.ppc", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149645, "urlhaus_id": "3927743", "url": "http://5.175.222.236/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "host": "5.175.222.236", "host_ip": "5.175.222.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149644, "urlhaus_id": "3927742", "url": "http://178.132.198.200/bins/vcimanagement.m68k", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149643, "urlhaus_id": "3927741", "url": "http://178.132.198.200/bins/vcimanagement.mpsl", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149642, "urlhaus_id": "3927740", "url": "http://178.132.198.200/bins/vcimanagement.arm", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149641, "urlhaus_id": "3927739", "url": "http://178.132.198.200/bins/vcimanagement.sh4", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149640, "urlhaus_id": "3927738", "url": "http://178.132.198.200/bins/vcimanagement.arm5", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:33 UTC", "discovered_at": "2026-10-03T16:48:33.000Z" }, { "id": 149654, "urlhaus_id": "3927737", "url": "http://176.65.139.140/bins/exodus.sh", "host": "176.65.139.140", "host_ip": "176.65.139.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, gafgyt, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:31 UTC", "discovered_at": "2026-10-03T16:48:31.000Z" }, { "id": 149656, "urlhaus_id": "3927736", "url": "http://178.132.198.200/ldr.sh", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:26 UTC", "discovered_at": "2026-10-03T16:48:26.000Z" }, { "id": 149655, "urlhaus_id": "3927735", "url": "http://178.132.198.200/payload_v12.sh", "host": "178.132.198.200", "host_ip": "178.132.198.200", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "censys, sh, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:48:26 UTC", "discovered_at": "2026-10-03T16:48:26.000Z" }, { "id": 149657, "urlhaus_id": "3927734", "url": "http://119.117.164.243:35036/bin.sh", "host": "119.117.164.243", "host_ip": "119.117.164.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 16:47:19 UTC", "discovered_at": "2026-10-03T16:47:19.000Z" }, { "id": 149663, "urlhaus_id": "3927733", "url": "http://39.74.35.79:43993/i", "host": "39.74.35.79", "host_ip": "39.74.35.79", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 16:47:16 UTC", "discovered_at": "2026-10-03T16:47:16.000Z" }, { "id": 149662, "urlhaus_id": "3927732", "url": "http://123.5.147.97:42445/i", "host": "123.5.147.97", "host_ip": "123.5.147.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 16:47:16 UTC", "discovered_at": "2026-10-03T16:47:16.000Z" }, { "id": 149661, "urlhaus_id": "3927731", "url": "http://222.127.251.169:34452/i", "host": "222.127.251.169", "host_ip": "222.127.251.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:47:16 UTC", "discovered_at": "2026-10-03T16:47:16.000Z" }, { "id": 149660, "urlhaus_id": "3927730", "url": "http://222.127.220.233:56413/i", "host": "222.127.220.233", "host_ip": "222.127.220.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:47:16 UTC", "discovered_at": "2026-10-03T16:47:16.000Z" }, { "id": 149659, "urlhaus_id": "3927729", "url": "http://110.136.11.200:46334/i", "host": "110.136.11.200", "host_ip": "110.136.11.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:47:16 UTC", "discovered_at": "2026-10-03T16:47:16.000Z" }, { "id": 149658, "urlhaus_id": "3927728", "url": "http://123.13.35.226:53535/bin.sh", "host": "123.13.35.226", "host_ip": "123.13.35.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 16:47:16 UTC", "discovered_at": "2026-10-03T16:47:16.000Z" }, { "id": 149665, "urlhaus_id": "3927727", "url": "http://182.126.198.116:42118/i", "host": "182.126.198.116", "host_ip": "182.126.198.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 16:47:15 UTC", "discovered_at": "2026-10-03T16:47:15.000Z" }, { "id": 149664, "urlhaus_id": "3927726", "url": "http://196.191.137.44:59694/i", "host": "196.191.137.44", "host_ip": "196.191.137.44", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:47:15 UTC", "discovered_at": "2026-10-03T16:47:15.000Z" }, { "id": 149667, "urlhaus_id": "3927725", "url": "http://110.136.11.200:46334/bin.sh", "host": "110.136.11.200", "host_ip": "110.136.11.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:32:12 UTC", "discovered_at": "2026-10-03T16:32:12.000Z" }, { "id": 149666, "urlhaus_id": "3927724", "url": "http://222.127.220.233:56413/bin.sh", "host": "222.127.220.233", "host_ip": "222.127.220.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:32:12 UTC", "discovered_at": "2026-10-03T16:32:12.000Z" }, { "id": 149668, "urlhaus_id": "3927723", "url": "http://79.35.99.31:36080/i", "host": "79.35.99.31", "host_ip": "79.35.99.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 16:32:11 UTC", "discovered_at": "2026-10-03T16:32:11.000Z" }, { "id": 149669, "urlhaus_id": "3927722", "url": "http://115.62.158.172:48965/i", "host": "115.62.158.172", "host_ip": "115.62.158.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 16:31:18 UTC", "discovered_at": "2026-10-03T16:31:18.000Z" }, { "id": 149670, "urlhaus_id": "3927721", "url": "http://196.191.104.40:59808/i", "host": "196.191.104.40", "host_ip": "196.191.104.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:18:13 UTC", "discovered_at": "2026-10-03T16:18:13.000Z" }, { "id": 149671, "urlhaus_id": "3927720", "url": "http://188.85.49.126:37700/i", "host": "188.85.49.126", "host_ip": "188.85.49.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 16:17:19 UTC", "discovered_at": "2026-10-03T16:17:19.000Z" }, { "id": 149672, "urlhaus_id": "3927719", "url": "http://150.107.92.124:45426/i", "host": "150.107.92.124", "host_ip": "150.107.92.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 16:17:15 UTC", "discovered_at": "2026-10-03T16:17:15.000Z" }, { "id": 149676, "urlhaus_id": "3927718", "url": "http://222.127.251.169:34452/bin.sh", "host": "222.127.251.169", "host_ip": "222.127.251.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:17:12 UTC", "discovered_at": "2026-10-03T16:17:12.000Z" }, { "id": 149675, "urlhaus_id": "3927717", "url": "http://200.115.102.246:57159/i", "host": "200.115.102.246", "host_ip": "200.115.102.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:17:12 UTC", "discovered_at": "2026-10-03T16:17:12.000Z" }, { "id": 149674, "urlhaus_id": "3927716", "url": "http://180.115.164.129:40173/i", "host": "180.115.164.129", "host_ip": "180.115.164.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 16:17:12 UTC", "discovered_at": "2026-10-03T16:17:12.000Z" }, { "id": 149673, "urlhaus_id": "3927715", "url": "http://27.44.147.72:42447/i", "host": "27.44.147.72", "host_ip": "27.44.147.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 16:17:12 UTC", "discovered_at": "2026-10-03T16:17:12.000Z" }, { "id": 149677, "urlhaus_id": "3927714", "url": "http://130.12.209.166:33401/bin.sh", "host": "130.12.209.166", "host_ip": "130.12.209.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 16:04:18 UTC", "discovered_at": "2026-10-03T16:04:18.000Z" }, { "id": 149678, "urlhaus_id": "3927713", "url": "http://216.9.226.50/n2/aarch64", "host": "216.9.226.50", "host_ip": "216.9.226.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:03:28 UTC", "discovered_at": "2026-10-03T16:03:28.000Z" }, { "id": 149679, "urlhaus_id": "3927712", "url": "http://160.119.66.18/n2/aarch64", "host": "160.119.66.18", "host_ip": "160.119.66.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "censys, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 16:02:21 UTC", "discovered_at": "2026-10-03T16:02:21.000Z" }, { "id": 149680, "urlhaus_id": "3927711", "url": "http://79.35.99.31:36080/bin.sh", "host": "79.35.99.31", "host_ip": "79.35.99.31", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 16:02:12 UTC", "discovered_at": "2026-10-03T16:02:12.000Z" }, { "id": 149682, "urlhaus_id": "3927710", "url": "http://123.7.222.14:32997/i", "host": "123.7.222.14", "host_ip": "123.7.222.14", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 16:02:11 UTC", "discovered_at": "2026-10-03T16:02:11.000Z" }, { "id": 149681, "urlhaus_id": "3927709", "url": "http://115.48.146.13:56381/bin.sh", "host": "115.48.146.13", "host_ip": "115.48.146.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 16:02:11 UTC", "discovered_at": "2026-10-03T16:02:11.000Z" }, { "id": 149687, "urlhaus_id": "3927708", "url": "http://180.115.164.129:40173/bin.sh", "host": "180.115.164.129", "host_ip": "180.115.164.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:46:16 UTC", "discovered_at": "2026-10-03T15:46:16.000Z" }, { "id": 149686, "urlhaus_id": "3927707", "url": "http://175.151.177.19:38792/i", "host": "175.151.177.19", "host_ip": "175.151.177.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 15:46:16 UTC", "discovered_at": "2026-10-03T15:46:16.000Z" }, { "id": 149685, "urlhaus_id": "3927706", "url": "http://123.10.68.142:36801/i", "host": "123.10.68.142", "host_ip": "123.10.68.142", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:46:16 UTC", "discovered_at": "2026-10-03T15:46:16.000Z" }, { "id": 149684, "urlhaus_id": "3927705", "url": "http://59.96.143.90:38414/i", "host": "59.96.143.90", "host_ip": "59.96.143.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:46:16 UTC", "discovered_at": "2026-10-03T15:46:16.000Z" }, { "id": 149683, "urlhaus_id": "3927704", "url": "http://123.190.19.174:35685/i", "host": "123.190.19.174", "host_ip": "123.190.19.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 15:46:16 UTC", "discovered_at": "2026-10-03T15:46:16.000Z" }, { "id": 149690, "urlhaus_id": "3927703", "url": "http://120.28.219.218:49322/i", "host": "120.28.219.218", "host_ip": "120.28.219.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:46:15 UTC", "discovered_at": "2026-10-03T15:46:15.000Z" }, { "id": 149689, "urlhaus_id": "3927702", "url": "http://60.23.238.222:54347/i", "host": "60.23.238.222", "host_ip": "60.23.238.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 15:46:15 UTC", "discovered_at": "2026-10-03T15:46:15.000Z" }, { "id": 149688, "urlhaus_id": "3927701", "url": "http://196.191.104.40:59808/bin.sh", "host": "196.191.104.40", "host_ip": "196.191.104.40", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:46:15 UTC", "discovered_at": "2026-10-03T15:46:15.000Z" }, { "id": 149691, "urlhaus_id": "3927700", "url": "http://123.7.222.14:32997/bin.sh", "host": "123.7.222.14", "host_ip": "123.7.222.14", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:31:23 UTC", "discovered_at": "2026-10-03T15:31:23.000Z" }, { "id": 149693, "urlhaus_id": "3927699", "url": "http://58.47.120.205:46693/bin.sh", "host": "58.47.120.205", "host_ip": "58.47.120.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:31:22 UTC", "discovered_at": "2026-10-03T15:31:22.000Z" }, { "id": 149692, "urlhaus_id": "3927698", "url": "http://60.23.238.222:54347/bin.sh", "host": "60.23.238.222", "host_ip": "60.23.238.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 15:31:22 UTC", "discovered_at": "2026-10-03T15:31:22.000Z" }, { "id": 149694, "urlhaus_id": "3927697", "url": "http://115.54.181.75:39305/i", "host": "115.54.181.75", "host_ip": "115.54.181.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:18:15 UTC", "discovered_at": "2026-10-03T15:18:15.000Z" }, { "id": 149695, "urlhaus_id": "3927696", "url": "http://183.35.50.53:40190/bin.sh", "host": "183.35.50.53", "host_ip": "183.35.50.53", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:17:28 UTC", "discovered_at": "2026-10-03T15:17:28.000Z" }, { "id": 149696, "urlhaus_id": "3927695", "url": "http://42.227.51.47:43385/i", "host": "42.227.51.47", "host_ip": "42.227.51.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:17:17 UTC", "discovered_at": "2026-10-03T15:17:17.000Z" }, { "id": 149699, "urlhaus_id": "3927694", "url": "http://115.48.36.194:43965/i", "host": "115.48.36.194", "host_ip": "115.48.36.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:17:16 UTC", "discovered_at": "2026-10-03T15:17:16.000Z" }, { "id": 149698, "urlhaus_id": "3927693", "url": "http://200.115.102.246:57159/bin.sh", "host": "200.115.102.246", "host_ip": "200.115.102.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:17:16 UTC", "discovered_at": "2026-10-03T15:17:16.000Z" }, { "id": 149697, "urlhaus_id": "3927692", "url": "http://182.117.3.198:51913/i", "host": "182.117.3.198", "host_ip": "182.117.3.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:17:16 UTC", "discovered_at": "2026-10-03T15:17:16.000Z" }, { "id": 149709, "urlhaus_id": "3927691", "url": "http://170.64.137.28/m68k", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149708, "urlhaus_id": "3927690", "url": "http://170.64.137.28/mips64", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149707, "urlhaus_id": "3927689", "url": "http://170.64.137.28/x86_64", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149706, "urlhaus_id": "3927688", "url": "http://170.64.137.28/armv7l", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149705, "urlhaus_id": "3927687", "url": "http://170.64.137.28/i686", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149704, "urlhaus_id": "3927686", "url": "http://170.64.137.28/mips", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149703, "urlhaus_id": "3927685", "url": "http://170.64.137.28/armv5l", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149702, "urlhaus_id": "3927684", "url": "http://170.64.137.28/aarch64", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149701, "urlhaus_id": "3927683", "url": "http://170.64.137.28/i486", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149700, "urlhaus_id": "3927682", "url": "http://170.64.137.28/powerpc", "host": "170.64.137.28", "host_ip": "170.64.137.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 15:08:28 UTC", "discovered_at": "2026-10-03T15:08:28.000Z" }, { "id": 149711, "urlhaus_id": "3927681", "url": "http://115.54.181.75:39305/bin.sh", "host": "115.54.181.75", "host_ip": "115.54.181.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:01:16 UTC", "discovered_at": "2026-10-03T15:01:16.000Z" }, { "id": 149710, "urlhaus_id": "3927680", "url": "http://115.48.36.194:43965/bin.sh", "host": "115.48.36.194", "host_ip": "115.48.36.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 15:01:16 UTC", "discovered_at": "2026-10-03T15:01:16.000Z" }, { "id": 149713, "urlhaus_id": "3927679", "url": "http://58.47.120.205:46693/i", "host": "58.47.120.205", "host_ip": "58.47.120.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:01:15 UTC", "discovered_at": "2026-10-03T15:01:15.000Z" }, { "id": 149712, "urlhaus_id": "3927678", "url": "http://157.66.146.183:36507/i", "host": "157.66.146.183", "host_ip": "157.66.146.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 15:01:15 UTC", "discovered_at": "2026-10-03T15:01:15.000Z" }, { "id": 149714, "urlhaus_id": "3927677", "url": "http://222.138.78.214:39682/i", "host": "222.138.78.214", "host_ip": "222.138.78.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 14:47:27 UTC", "discovered_at": "2026-10-03T14:47:27.000Z" }, { "id": 149715, "urlhaus_id": "3927676", "url": "http://101.108.79.252:37550/i", "host": "101.108.79.252", "host_ip": "101.108.79.252", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 14:47:16 UTC", "discovered_at": "2026-10-03T14:47:16.000Z" }, { "id": 149716, "urlhaus_id": "3927675", "url": "http://163.142.84.151:49005/i", "host": "163.142.84.151", "host_ip": "163.142.84.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 14:47:15 UTC", "discovered_at": "2026-10-03T14:47:15.000Z" }, { "id": 149717, "urlhaus_id": "3927674", "url": "http://120.28.215.36:52058/i", "host": "120.28.215.36", "host_ip": "120.28.215.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 14:32:14 UTC", "discovered_at": "2026-10-03T14:32:14.000Z" }, { "id": 149719, "urlhaus_id": "3927673", "url": "http://60.18.104.72:52101/i", "host": "60.18.104.72", "host_ip": "60.18.104.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 14:32:12 UTC", "discovered_at": "2026-10-03T14:32:12.000Z" }, { "id": 149718, "urlhaus_id": "3927672", "url": "http://219.154.154.24:35205/i", "host": "219.154.154.24", "host_ip": "219.154.154.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 14:32:12 UTC", "discovered_at": "2026-10-03T14:32:12.000Z" }, { "id": 149722, "urlhaus_id": "3927671", "url": "http://124.161.116.2:43439/i", "host": "124.161.116.2", "host_ip": "124.161.116.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 14:32:11 UTC", "discovered_at": "2026-10-03T14:32:11.000Z" }, { "id": 149721, "urlhaus_id": "3927670", "url": "http://157.66.146.183:36507/bin.sh", "host": "157.66.146.183", "host_ip": "157.66.146.183", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 14:32:11 UTC", "discovered_at": "2026-10-03T14:32:11.000Z" }, { "id": 149720, "urlhaus_id": "3927669", "url": "http://27.215.124.140:55542/bin.sh", "host": "27.215.124.140", "host_ip": "27.215.124.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 14:32:11 UTC", "discovered_at": "2026-10-03T14:32:11.000Z" }, { "id": 149723, "urlhaus_id": "3927668", "url": "http://27.44.145.46:33992/i", "host": "27.44.145.46", "host_ip": "27.44.145.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 14:23:25 UTC", "discovered_at": "2026-10-03T14:23:25.000Z" }, { "id": 149726, "urlhaus_id": "3927667", "url": "http://163.142.84.151:49005/bin.sh", "host": "163.142.84.151", "host_ip": "163.142.84.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 14:17:15 UTC", "discovered_at": "2026-10-03T14:17:15.000Z" }, { "id": 149725, "urlhaus_id": "3927666", "url": "http://222.138.78.214:39682/bin.sh", "host": "222.138.78.214", "host_ip": "222.138.78.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 14:17:15 UTC", "discovered_at": "2026-10-03T14:17:15.000Z" }, { "id": 149724, "urlhaus_id": "3927665", "url": "http://42.227.34.4:40560/i", "host": "42.227.34.4", "host_ip": "42.227.34.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 14:17:15 UTC", "discovered_at": "2026-10-03T14:17:15.000Z" }, { "id": 149728, "urlhaus_id": "3927664", "url": "http://39.79.138.55:39415/i", "host": "39.79.138.55", "host_ip": "39.79.138.55", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 14:17:13 UTC", "discovered_at": "2026-10-03T14:17:13.000Z" }, { "id": 149727, "urlhaus_id": "3927663", "url": "http://120.84.215.197:38478/bin.sh", "host": "120.84.215.197", "host_ip": "120.84.215.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 14:17:13 UTC", "discovered_at": "2026-10-03T14:17:13.000Z" }, { "id": 149731, "urlhaus_id": "3927662", "url": "http://175.147.95.203:40269/i", "host": "175.147.95.203", "host_ip": "175.147.95.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 14:02:14 UTC", "discovered_at": "2026-10-03T14:02:14.000Z" }, { "id": 149730, "urlhaus_id": "3927661", "url": "http://120.28.215.36:52058/bin.sh", "host": "120.28.215.36", "host_ip": "120.28.215.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 14:02:14 UTC", "discovered_at": "2026-10-03T14:02:14.000Z" }, { "id": 149729, "urlhaus_id": "3927660", "url": "http://112.198.194.175:55553/i", "host": "112.198.194.175", "host_ip": "112.198.194.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 14:02:14 UTC", "discovered_at": "2026-10-03T14:02:14.000Z" }, { "id": 149732, "urlhaus_id": "3927659", "url": "http://27.44.145.46:33992/bin.sh", "host": "27.44.145.46", "host_ip": "27.44.145.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 13:48:29 UTC", "discovered_at": "2026-10-03T13:48:29.000Z" }, { "id": 149734, "urlhaus_id": "3927658", "url": "http://39.79.138.55:39415/bin.sh", "host": "39.79.138.55", "host_ip": "39.79.138.55", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 13:46:14 UTC", "discovered_at": "2026-10-03T13:46:14.000Z" }, { "id": 149733, "urlhaus_id": "3927657", "url": "http://60.23.220.27:43041/i", "host": "60.23.220.27", "host_ip": "60.23.220.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 13:46:14 UTC", "discovered_at": "2026-10-03T13:46:14.000Z" }, { "id": 149735, "urlhaus_id": "3927656", "url": "http://182.240.8.141:47625/bin.sh", "host": "182.240.8.141", "host_ip": "182.240.8.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 13:16:25 UTC", "discovered_at": "2026-10-03T13:16:25.000Z" }, { "id": 149736, "urlhaus_id": "3927655", "url": "http://182.240.8.141:47625/i", "host": "182.240.8.141", "host_ip": "182.240.8.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 13:16:23 UTC", "discovered_at": "2026-10-03T13:16:23.000Z" }, { "id": 149738, "urlhaus_id": "3927654", "url": "http://175.174.7.17:55253/i", "host": "175.174.7.17", "host_ip": "175.174.7.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 13:16:16 UTC", "discovered_at": "2026-10-03T13:16:16.000Z" }, { "id": 149737, "urlhaus_id": "3927653", "url": "http://42.239.238.71:33555/i", "host": "42.239.238.71", "host_ip": "42.239.238.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 13:16:16 UTC", "discovered_at": "2026-10-03T13:16:16.000Z" }, { "id": 149739, "urlhaus_id": "3927652", "url": "http://123.190.235.239:55013/i", "host": "123.190.235.239", "host_ip": "123.190.235.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 13:03:16 UTC", "discovered_at": "2026-10-03T13:03:16.000Z" }, { "id": 149741, "urlhaus_id": "3927651", "url": "http://42.239.238.71:33555/bin.sh", "host": "42.239.238.71", "host_ip": "42.239.238.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 13:02:14 UTC", "discovered_at": "2026-10-03T13:02:14.000Z" }, { "id": 149740, "urlhaus_id": "3927650", "url": "http://42.230.69.42:32990/bin.sh", "host": "42.230.69.42", "host_ip": "42.230.69.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 13:02:14 UTC", "discovered_at": "2026-10-03T13:02:14.000Z" }, { "id": 149742, "urlhaus_id": "3927649", "url": "http://45.183.184.74:49148/i", "host": "45.183.184.74", "host_ip": "45.183.184.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 12:47:16 UTC", "discovered_at": "2026-10-03T12:47:16.000Z" }, { "id": 149743, "urlhaus_id": "3927648", "url": "http://182.117.35.19:43635/i", "host": "182.117.35.19", "host_ip": "182.117.35.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 12:32:14 UTC", "discovered_at": "2026-10-03T12:32:14.000Z" }, { "id": 149744, "urlhaus_id": "3927647", "url": "http://61.53.127.174:39508/i", "host": "61.53.127.174", "host_ip": "61.53.127.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 12:32:13 UTC", "discovered_at": "2026-10-03T12:32:13.000Z" }, { "id": 149745, "urlhaus_id": "3927646", "url": "http://115.48.146.13:56381/i", "host": "115.48.146.13", "host_ip": "115.48.146.13", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 12:31:17 UTC", "discovered_at": "2026-10-03T12:31:17.000Z" }, { "id": 149748, "urlhaus_id": "3927645", "url": "http://42.230.69.42:32990/i", "host": "42.230.69.42", "host_ip": "42.230.69.42", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 12:17:19 UTC", "discovered_at": "2026-10-03T12:17:19.000Z" }, { "id": 149747, "urlhaus_id": "3927644", "url": "http://222.137.144.228:57187/i", "host": "222.137.144.228", "host_ip": "222.137.144.228", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 12:17:19 UTC", "discovered_at": "2026-10-03T12:17:19.000Z" }, { "id": 149746, "urlhaus_id": "3927643", "url": "http://183.35.50.53:40190/i", "host": "183.35.50.53", "host_ip": "183.35.50.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 12:17:19 UTC", "discovered_at": "2026-10-03T12:17:19.000Z" }, { "id": 149749, "urlhaus_id": "3927642", "url": "http://42.227.145.212:40145/bin.sh", "host": "42.227.145.212", "host_ip": "42.227.145.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 12:17:18 UTC", "discovered_at": "2026-10-03T12:17:18.000Z" }, { "id": 149750, "urlhaus_id": "3927641", "url": "http://125.118.97.178:36365/i", "host": "125.118.97.178", "host_ip": "125.118.97.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 12:02:15 UTC", "discovered_at": "2026-10-03T12:02:15.000Z" }, { "id": 149751, "urlhaus_id": "3927640", "url": "http://59.97.253.84:42437/i", "host": "59.97.253.84", "host_ip": "59.97.253.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 12:02:13 UTC", "discovered_at": "2026-10-03T12:02:13.000Z" }, { "id": 149753, "urlhaus_id": "3927639", "url": "http://59.97.253.84:42437/bin.sh", "host": "59.97.253.84", "host_ip": "59.97.253.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 11:47:13 UTC", "discovered_at": "2026-10-03T11:47:13.000Z" }, { "id": 149752, "urlhaus_id": "3927638", "url": "http://123.13.35.226:53535/i", "host": "123.13.35.226", "host_ip": "123.13.35.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 11:47:13 UTC", "discovered_at": "2026-10-03T11:47:13.000Z" }, { "id": 149754, "urlhaus_id": "3927637", "url": "http://115.50.111.203:47986/bin.sh", "host": "115.50.111.203", "host_ip": "115.50.111.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 11:47:12 UTC", "discovered_at": "2026-10-03T11:47:12.000Z" }, { "id": 149756, "urlhaus_id": "3927636", "url": "http://178.78.50.24:21577/i", "host": "178.78.50.24", "host_ip": "178.78.50.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 11:17:16 UTC", "discovered_at": "2026-10-03T11:17:16.000Z" }, { "id": 149755, "urlhaus_id": "3927635", "url": "http://200.115.102.16:57348/i", "host": "200.115.102.16", "host_ip": "200.115.102.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 11:17:16 UTC", "discovered_at": "2026-10-03T11:17:16.000Z" }, { "id": 149758, "urlhaus_id": "3927634", "url": "http://38.56.20.112:35608/bin.sh", "host": "38.56.20.112", "host_ip": "38.56.20.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 11:17:15 UTC", "discovered_at": "2026-10-03T11:17:15.000Z" }, { "id": 149757, "urlhaus_id": "3927633", "url": "http://113.228.108.53:50311/bin.sh", "host": "113.228.108.53", "host_ip": "113.228.108.53", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 11:17:15 UTC", "discovered_at": "2026-10-03T11:17:15.000Z" }, { "id": 149759, "urlhaus_id": "3927632", "url": "http://36.84.112.242:59937/i", "host": "36.84.112.242", "host_ip": "36.84.112.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 11:02:22 UTC", "discovered_at": "2026-10-03T11:02:22.000Z" }, { "id": 149761, "urlhaus_id": "3927631", "url": "http://42.234.140.194:35074/i", "host": "42.234.140.194", "host_ip": "42.234.140.194", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 11:02:14 UTC", "discovered_at": "2026-10-03T11:02:14.000Z" }, { "id": 149760, "urlhaus_id": "3927630", "url": "http://222.211.138.158:49309/i", "host": "222.211.138.158", "host_ip": "222.211.138.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 11:02:14 UTC", "discovered_at": "2026-10-03T11:02:14.000Z" }, { "id": 149762, "urlhaus_id": "3927629", "url": "http://42.239.238.105:59721/bin.sh", "host": "42.239.238.105", "host_ip": "42.239.238.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 11:02:13 UTC", "discovered_at": "2026-10-03T11:02:13.000Z" }, { "id": 149763, "urlhaus_id": "3927628", "url": "https://facai.makaaop.cc/114.zip", "host": "facai.makaaop.cc", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:56:27 UTC", "discovered_at": "2026-10-03T10:56:27.000Z" }, { "id": 149764, "urlhaus_id": "3927627", "url": "http://emwqkekwqmekwq.work.gd/x86_64_nl", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:49 UTC", "discovered_at": "2026-10-03T10:49:49.000Z" }, { "id": 149765, "urlhaus_id": "3927626", "url": "http://119.109.240.204:45066/bin.sh", "host": "119.109.240.204", "host_ip": "119.109.240.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 10:49:44 UTC", "discovered_at": "2026-10-03T10:49:44.000Z" }, { "id": 149767, "urlhaus_id": "3927625", "url": "http://emwqkekwqmekwq.work.gd/x86_64", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:43 UTC", "discovered_at": "2026-10-03T10:49:43.000Z" }, { "id": 149766, "urlhaus_id": "3927624", "url": "http://emwqkekwqmekwq.work.gd/i586", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:43 UTC", "discovered_at": "2026-10-03T10:49:43.000Z" }, { "id": 149782, "urlhaus_id": "3927623", "url": "http://emwqkekwqmekwq.work.gd/armv5l", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149781, "urlhaus_id": "3927622", "url": "http://emwqkekwqmekwq.work.gd/i486", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149780, "urlhaus_id": "3927621", "url": "http://emwqkekwqmekwq.work.gd/powerpc-440fp", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149779, "urlhaus_id": "3927620", "url": "http://emwqkekwqmekwq.work.gd/x86", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149778, "urlhaus_id": "3927619", "url": "http://94.154.43.117/amd64", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149777, "urlhaus_id": "3927618", "url": "http://iloveanal.work.gd/b_persist", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149776, "urlhaus_id": "3927617", "url": "http://emwqkekwqmekwq.work.gd/x86_64_sr", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149775, "urlhaus_id": "3927616", "url": "http://emwqkekwqmekwq.work.gd/x86_64_new", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149774, "urlhaus_id": "3927615", "url": "http://emwqkekwqmekwq.work.gd/x86_64_dbg", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149773, "urlhaus_id": "3927614", "url": "http://emwqkekwqmekwq.work.gd/x86_64_nsr", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149772, "urlhaus_id": "3927613", "url": "http://emwqkekwqmekwq.work.gd/m68k", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149771, "urlhaus_id": "3927612", "url": "http://emwqkekwqmekwq.work.gd/armv7l", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149770, "urlhaus_id": "3927611", "url": "http://emwqkekwqmekwq.work.gd/sh4", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149769, "urlhaus_id": "3927610", "url": "http://emwqkekwqmekwq.work.gd/x86_64_clean", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149768, "urlhaus_id": "3927609", "url": "http://emwqkekwqmekwq.work.gd/x86_64_nowd", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:40 UTC", "discovered_at": "2026-10-03T10:49:40.000Z" }, { "id": 149784, "urlhaus_id": "3927608", "url": "http://emwqkekwqmekwq.work.gd/armv4l", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:39 UTC", "discovered_at": "2026-10-03T10:49:39.000Z" }, { "id": 149783, "urlhaus_id": "3927607", "url": "http://emwqkekwqmekwq.work.gd/x86_64_t8", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:39 UTC", "discovered_at": "2026-10-03T10:49:39.000Z" }, { "id": 149785, "urlhaus_id": "3927606", "url": "http://emwqkekwqmekwq.work.gd/arc", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:38 UTC", "discovered_at": "2026-10-03T10:49:38.000Z" }, { "id": 149792, "urlhaus_id": "3927605", "url": "http://emwqkekwqmekwq.work.gd/b_persist", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:32 UTC", "discovered_at": "2026-10-03T10:49:32.000Z" }, { "id": 149791, "urlhaus_id": "3927604", "url": "http://emwqkekwqmekwq.work.gd/b_lt", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:32 UTC", "discovered_at": "2026-10-03T10:49:32.000Z" }, { "id": 149790, "urlhaus_id": "3927603", "url": "http://emwqkekwqmekwq.work.gd/x86_64_fin", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:32 UTC", "discovered_at": "2026-10-03T10:49:32.000Z" }, { "id": 149789, "urlhaus_id": "3927602", "url": "http://emwqkekwqmekwq.work.gd/mips", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:32 UTC", "discovered_at": "2026-10-03T10:49:32.000Z" }, { "id": 149788, "urlhaus_id": "3927601", "url": "http://emwqkekwqmekwq.work.gd/x86_64_v2", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:32 UTC", "discovered_at": "2026-10-03T10:49:32.000Z" }, { "id": 149787, "urlhaus_id": "3927600", "url": "http://emwqkekwqmekwq.work.gd/armv6l", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:32 UTC", "discovered_at": "2026-10-03T10:49:32.000Z" }, { "id": 149786, "urlhaus_id": "3927599", "url": "http://emwqkekwqmekwq.work.gd/x86_64_ns", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:32 UTC", "discovered_at": "2026-10-03T10:49:32.000Z" }, { "id": 149796, "urlhaus_id": "3927598", "url": "http://94.154.43.117/mips", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:30 UTC", "discovered_at": "2026-10-03T10:49:30.000Z" }, { "id": 149795, "urlhaus_id": "3927597", "url": "http://94.154.43.117/arm6", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:30 UTC", "discovered_at": "2026-10-03T10:49:30.000Z" }, { "id": 149794, "urlhaus_id": "3927596", "url": "http://94.154.43.117/arm64", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:30 UTC", "discovered_at": "2026-10-03T10:49:30.000Z" }, { "id": 149793, "urlhaus_id": "3927595", "url": "http://94.154.43.117/i386", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:30 UTC", "discovered_at": "2026-10-03T10:49:30.000Z" }, { "id": 149798, "urlhaus_id": "3927594", "url": "http://emwqkekwqmekwq.work.gd/powerpc", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:29 UTC", "discovered_at": "2026-10-03T10:49:29.000Z" }, { "id": 149797, "urlhaus_id": "3927593", "url": "http://emwqkekwqmekwq.work.gd/mipsel", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:29 UTC", "discovered_at": "2026-10-03T10:49:29.000Z" }, { "id": 149800, "urlhaus_id": "3927592", "url": "http://222.246.41.32:48748/i", "host": "222.246.41.32", "host_ip": "222.246.41.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 10:49:28 UTC", "discovered_at": "2026-10-03T10:49:28.000Z" }, { "id": 149799, "urlhaus_id": "3927591", "url": "http://emwqkekwqmekwq.work.gd/i686", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:28 UTC", "discovered_at": "2026-10-03T10:49:28.000Z" }, { "id": 149801, "urlhaus_id": "3927590", "url": "http://emwqkekwqmekwq.work.gd/b_kt", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:27 UTC", "discovered_at": "2026-10-03T10:49:27.000Z" }, { "id": 149802, "urlhaus_id": "3927589", "url": "http://emwqkekwqmekwq.work.gd/b_wt", "host": "emwqkekwqmekwq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:26 UTC", "discovered_at": "2026-10-03T10:49:26.000Z" }, { "id": 149803, "urlhaus_id": "3927588", "url": "http://94.154.43.117/arm5", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:24 UTC", "discovered_at": "2026-10-03T10:49:24.000Z" }, { "id": 149810, "urlhaus_id": "3927587", "url": "http://94.154.43.117/arm", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:23 UTC", "discovered_at": "2026-10-03T10:49:23.000Z" }, { "id": 149809, "urlhaus_id": "3927586", "url": "http://94.154.43.117/android_arm64", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:23 UTC", "discovered_at": "2026-10-03T10:49:23.000Z" }, { "id": 149808, "urlhaus_id": "3927585", "url": "http://182.179.193.124:54558/bin.sh", "host": "182.179.193.124", "host_ip": "182.179.193.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 10:49:23 UTC", "discovered_at": "2026-10-03T10:49:23.000Z" }, { "id": 149807, "urlhaus_id": "3927584", "url": "http://94.154.43.117/x86", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:23 UTC", "discovered_at": "2026-10-03T10:49:23.000Z" }, { "id": 149806, "urlhaus_id": "3927583", "url": "http://94.154.43.117/armv7l", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:23 UTC", "discovered_at": "2026-10-03T10:49:23.000Z" }, { "id": 149805, "urlhaus_id": "3927582", "url": "http://94.154.43.117/bot.exe", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:23 UTC", "discovered_at": "2026-10-03T10:49:23.000Z" }, { "id": 149804, "urlhaus_id": "3927581", "url": "http://94.154.43.117/mipsle", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent", "last_online": null, "first_seen": "2026-10-03 10:49:23 UTC", "discovered_at": "2026-10-03T10:49:23.000Z" }, { "id": 149811, "urlhaus_id": "3927580", "url": "http://94.154.43.117/bins.sh", "host": "94.154.43.117", "host_ip": "94.154.43.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Go, GoDDoSAgent, mirai", "last_online": null, "first_seen": "2026-10-03 10:49:17 UTC", "discovered_at": "2026-10-03T10:49:17.000Z" }, { "id": 149813, "urlhaus_id": "3927579", "url": "http://iloveanal.work.gd/m68k", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:39 UTC", "discovered_at": "2026-10-03T10:34:39.000Z" }, { "id": 149812, "urlhaus_id": "3927578", "url": "http://iloveanal.work.gd/x86_64_dbg", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:39 UTC", "discovered_at": "2026-10-03T10:34:39.000Z" }, { "id": 149814, "urlhaus_id": "3927577", "url": "http://iloveanal.work.gd/armv6l", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:38 UTC", "discovered_at": "2026-10-03T10:34:38.000Z" }, { "id": 149823, "urlhaus_id": "3927576", "url": "http://iloveanal.work.gd/powerpc", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149822, "urlhaus_id": "3927575", "url": "http://iloveanal.work.gd/sh4", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149821, "urlhaus_id": "3927574", "url": "http://iloveanal.work.gd/x86_64_sr", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149820, "urlhaus_id": "3927573", "url": "http://iloveanal.work.gd/b_kt", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149819, "urlhaus_id": "3927572", "url": "http://iloveanal.work.gd/powerpc-440fp", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149818, "urlhaus_id": "3927571", "url": "http://iloveanal.work.gd/b_lt", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149817, "urlhaus_id": "3927570", "url": "http://iloveanal.work.gd/x86_64_ns", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149816, "urlhaus_id": "3927569", "url": "http://iloveanal.work.gd/mips", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149815, "urlhaus_id": "3927568", "url": "http://iloveanal.work.gd/i486", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:37 UTC", "discovered_at": "2026-10-03T10:34:37.000Z" }, { "id": 149825, "urlhaus_id": "3927567", "url": "http://iloveanal.work.gd/x86_64", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:36 UTC", "discovered_at": "2026-10-03T10:34:36.000Z" }, { "id": 149824, "urlhaus_id": "3927566", "url": "http://iloveanal.work.gd/x86_64_clean", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:36 UTC", "discovered_at": "2026-10-03T10:34:36.000Z" }, { "id": 149830, "urlhaus_id": "3927565", "url": "http://iloveanal.work.gd/x86_64_nsr", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:35 UTC", "discovered_at": "2026-10-03T10:34:35.000Z" }, { "id": 149829, "urlhaus_id": "3927564", "url": "http://iloveanal.work.gd/x86_64_t8", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:35 UTC", "discovered_at": "2026-10-03T10:34:35.000Z" }, { "id": 149828, "urlhaus_id": "3927563", "url": "http://iloveanal.work.gd/armv4l", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:35 UTC", "discovered_at": "2026-10-03T10:34:35.000Z" }, { "id": 149827, "urlhaus_id": "3927562", "url": "http://iloveanal.work.gd/arc", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:35 UTC", "discovered_at": "2026-10-03T10:34:35.000Z" }, { "id": 149826, "urlhaus_id": "3927561", "url": "http://iloveanal.work.gd/mipsel", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:35 UTC", "discovered_at": "2026-10-03T10:34:35.000Z" }, { "id": 149834, "urlhaus_id": "3927560", "url": "http://iloveanal.work.gd/x86_64_nl", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:34 UTC", "discovered_at": "2026-10-03T10:34:34.000Z" }, { "id": 149833, "urlhaus_id": "3927559", "url": "http://iloveanal.work.gd/armv7l", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:34 UTC", "discovered_at": "2026-10-03T10:34:34.000Z" }, { "id": 149832, "urlhaus_id": "3927558", "url": "http://iloveanal.work.gd/x86_64_nowd", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:34 UTC", "discovered_at": "2026-10-03T10:34:34.000Z" }, { "id": 149831, "urlhaus_id": "3927557", "url": "http://iloveanal.work.gd/i686", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:34 UTC", "discovered_at": "2026-10-03T10:34:34.000Z" }, { "id": 149835, "urlhaus_id": "3927556", "url": "http://iloveanal.work.gd/x86_64_fin", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:33 UTC", "discovered_at": "2026-10-03T10:34:33.000Z" }, { "id": 149836, "urlhaus_id": "3927555", "url": "http://iloveanal.work.gd/x86_64_v2", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:23 UTC", "discovered_at": "2026-10-03T10:34:23.000Z" }, { "id": 149841, "urlhaus_id": "3927554", "url": "http://iloveanal.work.gd/x86_64_new", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:22 UTC", "discovered_at": "2026-10-03T10:34:22.000Z" }, { "id": 149840, "urlhaus_id": "3927553", "url": "http://iloveanal.work.gd/armv5l", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:22 UTC", "discovered_at": "2026-10-03T10:34:22.000Z" }, { "id": 149839, "urlhaus_id": "3927552", "url": "http://iloveanal.work.gd/b_wt", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:22 UTC", "discovered_at": "2026-10-03T10:34:22.000Z" }, { "id": 149838, "urlhaus_id": "3927551", "url": "http://iloveanal.work.gd/i586", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:22 UTC", "discovered_at": "2026-10-03T10:34:22.000Z" }, { "id": 149837, "urlhaus_id": "3927550", "url": "http://iloveanal.work.gd/x86", "host": "iloveanal.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:34:22 UTC", "discovered_at": "2026-10-03T10:34:22.000Z" }, { "id": 149842, "urlhaus_id": "3927549", "url": "http://wemqmewkqewq.work.gd/b_lt", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:33:26 UTC", "discovered_at": "2026-10-03T10:33:26.000Z" }, { "id": 149843, "urlhaus_id": "3927548", "url": "http://wemqmewkqewq.work.gd/x86_64_t8", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:32 UTC", "discovered_at": "2026-10-03T10:32:32.000Z" }, { "id": 149849, "urlhaus_id": "3927547", "url": "http://wemqmewkqewq.work.gd/x86_64_new", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:31 UTC", "discovered_at": "2026-10-03T10:32:31.000Z" }, { "id": 149848, "urlhaus_id": "3927546", "url": "http://wemqmewkqewq.work.gd/x86_64_ns", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:31 UTC", "discovered_at": "2026-10-03T10:32:31.000Z" }, { "id": 149847, "urlhaus_id": "3927545", "url": "http://wemqmewkqewq.work.gd/x86_64_dbg", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:31 UTC", "discovered_at": "2026-10-03T10:32:31.000Z" }, { "id": 149846, "urlhaus_id": "3927544", "url": "http://wemqmewkqewq.work.gd/b_kt", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:31 UTC", "discovered_at": "2026-10-03T10:32:31.000Z" }, { "id": 149845, "urlhaus_id": "3927543", "url": "http://wemqmewkqewq.work.gd/x86_64_sr", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:31 UTC", "discovered_at": "2026-10-03T10:32:31.000Z" }, { "id": 149844, "urlhaus_id": "3927542", "url": "http://wemqmewkqewq.work.gd/x86_64_nl", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:31 UTC", "discovered_at": "2026-10-03T10:32:31.000Z" }, { "id": 149855, "urlhaus_id": "3927541", "url": "http://wemqmewkqewq.work.gd/x86_64_nowd", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:30 UTC", "discovered_at": "2026-10-03T10:32:30.000Z" }, { "id": 149854, "urlhaus_id": "3927540", "url": "http://wemqmewkqewq.work.gd/b_wt", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:30 UTC", "discovered_at": "2026-10-03T10:32:30.000Z" }, { "id": 149853, "urlhaus_id": "3927539", "url": "http://wemqmewkqewq.work.gd/x86_64_nsr", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:30 UTC", "discovered_at": "2026-10-03T10:32:30.000Z" }, { "id": 149852, "urlhaus_id": "3927538", "url": "http://wemqmewkqewq.work.gd/x86_64_clean", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:30 UTC", "discovered_at": "2026-10-03T10:32:30.000Z" }, { "id": 149851, "urlhaus_id": "3927537", "url": "http://wemqmewkqewq.work.gd/x86_64_fin", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:30 UTC", "discovered_at": "2026-10-03T10:32:30.000Z" }, { "id": 149850, "urlhaus_id": "3927536", "url": "http://wemqmewkqewq.work.gd/x86_64_v2", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:30 UTC", "discovered_at": "2026-10-03T10:32:30.000Z" }, { "id": 149856, "urlhaus_id": "3927535", "url": "http://wemqmewkqewq.work.gd/b_persist", "host": "wemqmewkqewq.work.gd", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:32:29 UTC", "discovered_at": "2026-10-03T10:32:29.000Z" }, { "id": 149857, "urlhaus_id": "3927534", "url": "http://60.19.216.186:43380/bin.sh", "host": "60.19.216.186", "host_ip": "60.19.216.186", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:32:20 UTC", "discovered_at": "2026-10-03T10:32:20.000Z" }, { "id": 149859, "urlhaus_id": "3927533", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/tgteru.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-03 10:32:16 UTC", "discovered_at": "2026-10-03T10:32:16.000Z" }, { "id": 149858, "urlhaus_id": "3927532", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/tgryan.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe", "last_online": null, "first_seen": "2026-10-03 10:32:16 UTC", "discovered_at": "2026-10-03T10:32:16.000Z" }, { "id": 149860, "urlhaus_id": "3927531", "url": "http://219.155.230.253:54588/bin.sh", "host": "219.155.230.253", "host_ip": "219.155.230.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:32:14 UTC", "discovered_at": "2026-10-03T10:32:14.000Z" }, { "id": 149861, "urlhaus_id": "3927530", "url": "http://91.130.44.24:54199/i", "host": "91.130.44.24", "host_ip": "91.130.44.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:32:13 UTC", "discovered_at": "2026-10-03T10:32:13.000Z" }, { "id": 149863, "urlhaus_id": "3927529", "url": "http://truswallet.foundation/bins/parm", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:30:26 UTC", "discovered_at": "2026-10-03T10:30:26.000Z" }, { "id": 149862, "urlhaus_id": "3927528", "url": "http://truswallet.foundation/bins/pspc", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:30:26 UTC", "discovered_at": "2026-10-03T10:30:26.000Z" }, { "id": 149864, "urlhaus_id": "3927527", "url": "http://truswallet.foundation/bins/parm5", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:30:24 UTC", "discovered_at": "2026-10-03T10:30:24.000Z" }, { "id": 149869, "urlhaus_id": "3927526", "url": "http://truswallet.foundation/bins/parm6", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:23 UTC", "discovered_at": "2026-10-03T10:29:23.000Z" }, { "id": 149868, "urlhaus_id": "3927525", "url": "http://truswallet.foundation/bins/pmips", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:23 UTC", "discovered_at": "2026-10-03T10:29:23.000Z" }, { "id": 149867, "urlhaus_id": "3927524", "url": "http://truswallet.foundation/bins/px86", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:23 UTC", "discovered_at": "2026-10-03T10:29:23.000Z" }, { "id": 149866, "urlhaus_id": "3927523", "url": "http://truswallet.foundation/bins/parm7", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:23 UTC", "discovered_at": "2026-10-03T10:29:23.000Z" }, { "id": 149865, "urlhaus_id": "3927522", "url": "http://truswallet.foundation/bins/psh4", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:23 UTC", "discovered_at": "2026-10-03T10:29:23.000Z" }, { "id": 149871, "urlhaus_id": "3927521", "url": "http://truswallet.foundation/bins/pmpsl", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:15 UTC", "discovered_at": "2026-10-03T10:29:15.000Z" }, { "id": 149870, "urlhaus_id": "3927520", "url": "http://truswallet.foundation/bins/x86_64", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:15 UTC", "discovered_at": "2026-10-03T10:29:15.000Z" }, { "id": 149872, "urlhaus_id": "3927519", "url": "http://truswallet.foundation/bins/pm68k", "host": "truswallet.foundation", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:29:13 UTC", "discovered_at": "2026-10-03T10:29:13.000Z" }, { "id": 149874, "urlhaus_id": "3927518", "url": "http://182.116.20.83:47269/i", "host": "182.116.20.83", "host_ip": "182.116.20.83", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:17:16 UTC", "discovered_at": "2026-10-03T10:17:16.000Z" }, { "id": 149873, "urlhaus_id": "3927517", "url": "http://222.246.41.32:48748/bin.sh", "host": "222.246.41.32", "host_ip": "222.246.41.32", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 10:17:16 UTC", "discovered_at": "2026-10-03T10:17:16.000Z" }, { "id": 149878, "urlhaus_id": "3927516", "url": "http://42.5.129.154:51644/i", "host": "42.5.129.154", "host_ip": "42.5.129.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:17:15 UTC", "discovered_at": "2026-10-03T10:17:15.000Z" }, { "id": 149877, "urlhaus_id": "3927515", "url": "http://103.172.186.195:39787/i", "host": "103.172.186.195", "host_ip": "103.172.186.195", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 10:17:15 UTC", "discovered_at": "2026-10-03T10:17:15.000Z" }, { "id": 149876, "urlhaus_id": "3927514", "url": "http://125.44.252.89:54690/i", "host": "125.44.252.89", "host_ip": "125.44.252.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 10:17:15 UTC", "discovered_at": "2026-10-03T10:17:15.000Z" }, { "id": 149875, "urlhaus_id": "3927513", "url": "http://222.137.72.140:51053/bin.sh", "host": "222.137.72.140", "host_ip": "222.137.72.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 10:17:15 UTC", "discovered_at": "2026-10-03T10:17:15.000Z" }, { "id": 149884, "urlhaus_id": "3927512", "url": "http://www.wuming0.tech/arm5", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:35 UTC", "discovered_at": "2026-10-03T10:15:35.000Z" }, { "id": 149883, "urlhaus_id": "3927511", "url": "http://www.wuming0.tech/x86", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:35 UTC", "discovered_at": "2026-10-03T10:15:35.000Z" }, { "id": 149882, "urlhaus_id": "3927510", "url": "http://www.wuming0.tech/mips", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:35 UTC", "discovered_at": "2026-10-03T10:15:35.000Z" }, { "id": 149881, "urlhaus_id": "3927509", "url": "http://www.wuming0.tech/arm", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:35 UTC", "discovered_at": "2026-10-03T10:15:35.000Z" }, { "id": 149880, "urlhaus_id": "3927508", "url": "http://www.wuming0.tech/x86_64", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:35 UTC", "discovered_at": "2026-10-03T10:15:35.000Z" }, { "id": 149879, "urlhaus_id": "3927507", "url": "http://www.wuming0.tech/debug.dbg", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:35 UTC", "discovered_at": "2026-10-03T10:15:35.000Z" }, { "id": 149890, "urlhaus_id": "3927506", "url": "http://www.wuming0.tech/sh4", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:30 UTC", "discovered_at": "2026-10-03T10:15:30.000Z" }, { "id": 149889, "urlhaus_id": "3927505", "url": "http://www.wuming0.tech/mpsl", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:30 UTC", "discovered_at": "2026-10-03T10:15:30.000Z" }, { "id": 149888, "urlhaus_id": "3927504", "url": "http://www.wuming0.tech/m68k", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:30 UTC", "discovered_at": "2026-10-03T10:15:30.000Z" }, { "id": 149887, "urlhaus_id": "3927503", "url": "http://www.wuming0.tech/arm6", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:30 UTC", "discovered_at": "2026-10-03T10:15:30.000Z" }, { "id": 149886, "urlhaus_id": "3927502", "url": "http://www.wuming0.tech/arm7", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:30 UTC", "discovered_at": "2026-10-03T10:15:30.000Z" }, { "id": 149885, "urlhaus_id": "3927501", "url": "http://www.wuming0.tech/ppc", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:30 UTC", "discovered_at": "2026-10-03T10:15:30.000Z" }, { "id": 149892, "urlhaus_id": "3927500", "url": "https://files.54daysaverage.qzz.io/sodium.jar", "host": "files.54daysaverage.qzz.io", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:15:25 UTC", "discovered_at": "2026-10-03T10:15:25.000Z" }, { "id": 149891, "urlhaus_id": "3927499", "url": "https://files.54daysaverage.qzz.io/helix.jar", "host": "files.54daysaverage.qzz.io", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:15:25 UTC", "discovered_at": "2026-10-03T10:15:25.000Z" }, { "id": 149895, "urlhaus_id": "3927498", "url": "https://files.54daysaverage.qzz.io/sylant.class", "host": "files.54daysaverage.qzz.io", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:15:24 UTC", "discovered_at": "2026-10-03T10:15:24.000Z" }, { "id": 149894, "urlhaus_id": "3927497", "url": "http://www.wuming0.tech/spc", "host": "www.wuming0.tech", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "botnetdomain, elf, mirai", "last_online": null, "first_seen": "2026-10-03 10:15:24 UTC", "discovered_at": "2026-10-03T10:15:24.000Z" }, { "id": 149893, "urlhaus_id": "3927496", "url": "http://files.54daysaverage.qzz.io/discordhash.js", "host": "files.54daysaverage.qzz.io", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:15:24 UTC", "discovered_at": "2026-10-03T10:15:24.000Z" }, { "id": 149896, "urlhaus_id": "3927495", "url": "http://36.71.23.92:55622/bin.sh", "host": "36.71.23.92", "host_ip": "36.71.23.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 10:13:27 UTC", "discovered_at": "2026-10-03T10:13:27.000Z" }, { "id": 149898, "urlhaus_id": "3927494", "url": "http://60.19.223.213:44512/i", "host": "60.19.223.213", "host_ip": "60.19.223.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:02:14 UTC", "discovered_at": "2026-10-03T10:02:14.000Z" }, { "id": 149897, "urlhaus_id": "3927493", "url": "http://42.231.65.20:58787/i", "host": "42.231.65.20", "host_ip": "42.231.65.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:02:14 UTC", "discovered_at": "2026-10-03T10:02:14.000Z" }, { "id": 149902, "urlhaus_id": "3927492", "url": "http://105.224.47.137:37731/bin.sh", "host": "105.224.47.137", "host_ip": "105.224.47.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 10:02:13 UTC", "discovered_at": "2026-10-03T10:02:13.000Z" }, { "id": 149901, "urlhaus_id": "3927491", "url": "http://182.52.125.221:51224/i", "host": "182.52.125.221", "host_ip": "182.52.125.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 10:02:13 UTC", "discovered_at": "2026-10-03T10:02:13.000Z" }, { "id": 149900, "urlhaus_id": "3927490", "url": "http://91.130.44.24:54199/bin.sh", "host": "91.130.44.24", "host_ip": "91.130.44.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:02:13 UTC", "discovered_at": "2026-10-03T10:02:13.000Z" }, { "id": 149899, "urlhaus_id": "3927489", "url": "http://60.23.233.5:48452/i", "host": "60.23.233.5", "host_ip": "60.23.233.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 10:02:13 UTC", "discovered_at": "2026-10-03T10:02:13.000Z" }, { "id": 149903, "urlhaus_id": "3927488", "url": "http://182.120.3.94:34138/i", "host": "182.120.3.94", "host_ip": "182.120.3.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips", "last_online": null, "first_seen": "2026-10-03 09:53:29 UTC", "discovered_at": "2026-10-03T09:53:29.000Z" }, { "id": 149904, "urlhaus_id": "3927487", "url": "http://123.4.244.246:59572/i", "host": "123.4.244.246", "host_ip": "123.4.244.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:48:14 UTC", "discovered_at": "2026-10-03T09:48:14.000Z" }, { "id": 149905, "urlhaus_id": "3927486", "url": "http://196.189.98.77:54261/bin.sh", "host": "196.189.98.77", "host_ip": "196.189.98.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 09:47:28 UTC", "discovered_at": "2026-10-03T09:47:28.000Z" }, { "id": 149906, "urlhaus_id": "3927485", "url": "http://182.52.125.221:51224/bin.sh", "host": "182.52.125.221", "host_ip": "182.52.125.221", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 09:47:17 UTC", "discovered_at": "2026-10-03T09:47:17.000Z" }, { "id": 149908, "urlhaus_id": "3927484", "url": "http://222.142.209.120:52439/bin.sh", "host": "222.142.209.120", "host_ip": "222.142.209.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:47:16 UTC", "discovered_at": "2026-10-03T09:47:16.000Z" }, { "id": 149907, "urlhaus_id": "3927483", "url": "http://27.217.248.166:50836/bin.sh", "host": "27.217.248.166", "host_ip": "27.217.248.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:47:16 UTC", "discovered_at": "2026-10-03T09:47:16.000Z" }, { "id": 149911, "urlhaus_id": "3927482", "url": "http://94.154.43.138:8099/p.x86_64", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:33 UTC", "discovered_at": "2026-10-03T09:40:33.000Z" }, { "id": 149910, "urlhaus_id": "3927481", "url": "http://94.154.43.138:8099/p.arm5", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:33 UTC", "discovered_at": "2026-10-03T09:40:33.000Z" }, { "id": 149909, "urlhaus_id": "3927480", "url": "http://222.142.209.120:52439/i", "host": "222.142.209.120", "host_ip": "222.142.209.120", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 09:40:33 UTC", "discovered_at": "2026-10-03T09:40:33.000Z" }, { "id": 149919, "urlhaus_id": "3927479", "url": "http://94.154.43.138:8099/p.arm64", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149918, "urlhaus_id": "3927478", "url": "http://94.154.43.138:8099/p.s390x", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149917, "urlhaus_id": "3927477", "url": "http://94.154.43.138:8099/p.x86", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149916, "urlhaus_id": "3927476", "url": "http://94.154.43.138:8099/p.arm7", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149915, "urlhaus_id": "3927475", "url": "http://94.154.43.138:8099/p.arm6", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149914, "urlhaus_id": "3927474", "url": "http://94.154.43.138:8099/p.mipsle", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149913, "urlhaus_id": "3927473", "url": "http://94.154.43.138:8099/p.loong64", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149912, "urlhaus_id": "3927472", "url": "http://94.154.43.138:8099/p.mips", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:32 UTC", "discovered_at": "2026-10-03T09:40:32.000Z" }, { "id": 149921, "urlhaus_id": "3927471", "url": "http://94.154.43.138:8099/p.riscv64", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:31 UTC", "discovered_at": "2026-10-03T09:40:31.000Z" }, { "id": 149920, "urlhaus_id": "3927470", "url": "http://94.154.43.138:8099/p.mips64", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:31 UTC", "discovered_at": "2026-10-03T09:40:31.000Z" }, { "id": 149922, "urlhaus_id": "3927469", "url": "http://94.154.43.138:8099/p.mips64le", "host": "94.154.43.138", "host_ip": "94.154.43.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 09:40:30 UTC", "discovered_at": "2026-10-03T09:40:30.000Z" }, { "id": 149923, "urlhaus_id": "3927468", "url": "https://github.com/sjsnb20-tech/Millida/raw/main/MillidaDupe-1.03-26.3MC.jar", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 09:40:21 UTC", "discovered_at": "2026-10-03T09:40:21.000Z" }, { "id": 149924, "urlhaus_id": "3927467", "url": "http://60.23.233.5:48452/bin.sh", "host": "60.23.233.5", "host_ip": "60.23.233.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 09:31:33 UTC", "discovered_at": "2026-10-03T09:31:33.000Z" }, { "id": 149925, "urlhaus_id": "3927466", "url": "http://182.120.3.94:34138/bin.sh", "host": "182.120.3.94", "host_ip": "182.120.3.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 09:31:22 UTC", "discovered_at": "2026-10-03T09:31:22.000Z" }, { "id": 149929, "urlhaus_id": "3927465", "url": "http://27.44.147.110:57999/i", "host": "27.44.147.110", "host_ip": "27.44.147.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 09:31:20 UTC", "discovered_at": "2026-10-03T09:31:20.000Z" }, { "id": 149928, "urlhaus_id": "3927464", "url": "http://182.127.191.193:47203/bin.sh", "host": "182.127.191.193", "host_ip": "182.127.191.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:31:20 UTC", "discovered_at": "2026-10-03T09:31:20.000Z" }, { "id": 149927, "urlhaus_id": "3927463", "url": "http://59.96.136.247:58738/i", "host": "59.96.136.247", "host_ip": "59.96.136.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:31:20 UTC", "discovered_at": "2026-10-03T09:31:20.000Z" }, { "id": 149926, "urlhaus_id": "3927462", "url": "http://216.28.193.204:43927/i", "host": "216.28.193.204", "host_ip": "216.28.193.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 09:31:20 UTC", "discovered_at": "2026-10-03T09:31:20.000Z" }, { "id": 149930, "urlhaus_id": "3927461", "url": "http://113.230.27.216:42959/bin.sh", "host": "113.230.27.216", "host_ip": "113.230.27.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 09:20:30 UTC", "discovered_at": "2026-10-03T09:20:30.000Z" }, { "id": 149931, "urlhaus_id": "3927460", "url": "http://182.119.34.153:52393/i", "host": "182.119.34.153", "host_ip": "182.119.34.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:18:12 UTC", "discovered_at": "2026-10-03T09:18:12.000Z" }, { "id": 149932, "urlhaus_id": "3927459", "url": "http://115.55.221.184:42148/i", "host": "115.55.221.184", "host_ip": "115.55.221.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:17:18 UTC", "discovered_at": "2026-10-03T09:17:18.000Z" }, { "id": 149934, "urlhaus_id": "3927458", "url": "http://219.156.61.182:47813/i", "host": "219.156.61.182", "host_ip": "219.156.61.182", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:17:17 UTC", "discovered_at": "2026-10-03T09:17:17.000Z" }, { "id": 149933, "urlhaus_id": "3927457", "url": "http://124.131.140.14:34853/bin.sh", "host": "124.131.140.14", "host_ip": "124.131.140.14", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 09:17:17 UTC", "discovered_at": "2026-10-03T09:17:17.000Z" }, { "id": 149935, "urlhaus_id": "3927456", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/gaylo.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "exe, quasar, QuasarRAT, rat", "last_online": null, "first_seen": "2026-10-03 09:10:15 UTC", "discovered_at": "2026-10-03T09:10:15.000Z" }, { "id": 149939, "urlhaus_id": "3927455", "url": "https://fahrzeugvergabe.de/api/cm-token", "host": "fahrzeugvergabe.de", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:14 UTC", "discovered_at": "2026-10-03T09:10:14.000Z" }, { "id": 149938, "urlhaus_id": "3927454", "url": "https://nordmann-automobilgruppe.de/api/cm-token", "host": "nordmann-automobilgruppe.de", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:14 UTC", "discovered_at": "2026-10-03T09:10:14.000Z" }, { "id": 149937, "urlhaus_id": "3927453", "url": "https://baainbw-vergabe.de/api/cm-token", "host": "baainbw-vergabe.de", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:14 UTC", "discovered_at": "2026-10-03T09:10:14.000Z" }, { "id": 149936, "urlhaus_id": "3927452", "url": "https://autoflotte-vergabe.de/api/cm-token", "host": "autoflotte-vergabe.de", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:14 UTC", "discovered_at": "2026-10-03T09:10:14.000Z" }, { "id": 149941, "urlhaus_id": "3927451", "url": "https://fahrzeugvergabe.de/", "host": "fahrzeugvergabe.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:12 UTC", "discovered_at": "2026-10-03T09:10:12.000Z" }, { "id": 149940, "urlhaus_id": "3927450", "url": "https://autoflotte-vergabe.de/", "host": "autoflotte-vergabe.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:12 UTC", "discovered_at": "2026-10-03T09:10:12.000Z" }, { "id": 149942, "urlhaus_id": "3927449", "url": "https://fahrzeugvergabe.de/unterlagen.html", "host": "fahrzeugvergabe.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:11 UTC", "discovered_at": "2026-10-03T09:10:11.000Z" }, { "id": 149946, "urlhaus_id": "3927448", "url": "https://autoflotte-vergabe.de/unterlagen.html", "host": "autoflotte-vergabe.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:10 UTC", "discovered_at": "2026-10-03T09:10:10.000Z" }, { "id": 149945, "urlhaus_id": "3927447", "url": "https://nordmann-automobilgruppe.de/unterlagen.html", "host": "nordmann-automobilgruppe.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:10 UTC", "discovered_at": "2026-10-03T09:10:10.000Z" }, { "id": 149944, "urlhaus_id": "3927446", "url": "https://baainbw-vergabe.de/unterlagen.html", "host": "baainbw-vergabe.de", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, DEU, exe, FileFix, Loader, powershell", "last_online": null, "first_seen": "2026-10-03 09:10:10 UTC", "discovered_at": "2026-10-03T09:10:10.000Z" }, { "id": 149943, "urlhaus_id": "3927445", "url": "http://2.27.248.149/lotus.sh", "host": "2.27.248.149", "host_ip": "2.27.248.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-03 09:10:10 UTC", "discovered_at": "2026-10-03T09:10:10.000Z" }, { "id": 149948, "urlhaus_id": "3927444", "url": "http://27.44.147.110:57999/bin.sh", "host": "27.44.147.110", "host_ip": "27.44.147.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 09:02:17 UTC", "discovered_at": "2026-10-03T09:02:17.000Z" }, { "id": 149947, "urlhaus_id": "3927443", "url": "http://27.37.103.24:49761/i", "host": "27.37.103.24", "host_ip": "27.37.103.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 09:02:17 UTC", "discovered_at": "2026-10-03T09:02:17.000Z" }, { "id": 149949, "urlhaus_id": "3927442", "url": "http://59.96.136.247:58738/bin.sh", "host": "59.96.136.247", "host_ip": "59.96.136.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 09:02:16 UTC", "discovered_at": "2026-10-03T09:02:16.000Z" }, { "id": 149950, "urlhaus_id": "3927441", "url": "http://27.215.78.29:44569/i", "host": "27.215.78.29", "host_ip": "27.215.78.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 08:50:25 UTC", "discovered_at": "2026-10-03T08:50:25.000Z" }, { "id": 149951, "urlhaus_id": "3927440", "url": "http://175.42.54.216:51431/i", "host": "175.42.54.216", "host_ip": "175.42.54.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 08:47:15 UTC", "discovered_at": "2026-10-03T08:47:15.000Z" }, { "id": 149952, "urlhaus_id": "3927439", "url": "http://124.131.140.14:34853/i", "host": "124.131.140.14", "host_ip": "124.131.140.14", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:47:14 UTC", "discovered_at": "2026-10-03T08:47:14.000Z" }, { "id": 149954, "urlhaus_id": "3927438", "url": "http://113.228.108.53:50311/i", "host": "113.228.108.53", "host_ip": "113.228.108.53", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:47:13 UTC", "discovered_at": "2026-10-03T08:47:13.000Z" }, { "id": 149953, "urlhaus_id": "3927437", "url": "http://105.225.99.162:57309/i", "host": "105.225.99.162", "host_ip": "105.225.99.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 08:47:13 UTC", "discovered_at": "2026-10-03T08:47:13.000Z" }, { "id": 149955, "urlhaus_id": "3927436", "url": "http://85.202.163.162/arm5", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 08:40:28 UTC", "discovered_at": "2026-10-03T08:40:28.000Z" }, { "id": 149960, "urlhaus_id": "3927435", "url": "http://45.144.52.239/armv6l", "host": "45.144.52.239", "host_ip": "45.144.52.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 08:40:26 UTC", "discovered_at": "2026-10-03T08:40:26.000Z" }, { "id": 149959, "urlhaus_id": "3927434", "url": "http://45.144.52.239/x86_64", "host": "45.144.52.239", "host_ip": "45.144.52.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 08:40:26 UTC", "discovered_at": "2026-10-03T08:40:26.000Z" }, { "id": 149958, "urlhaus_id": "3927433", "url": "http://45.144.52.239/armv4l", "host": "45.144.52.239", "host_ip": "45.144.52.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 08:40:26 UTC", "discovered_at": "2026-10-03T08:40:26.000Z" }, { "id": 149957, "urlhaus_id": "3927432", "url": "http://45.144.52.239/armv5l", "host": "45.144.52.239", "host_ip": "45.144.52.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 08:40:26 UTC", "discovered_at": "2026-10-03T08:40:26.000Z" }, { "id": 149956, "urlhaus_id": "3927431", "url": "http://45.144.52.239/armv7l", "host": "45.144.52.239", "host_ip": "45.144.52.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-03 08:40:26 UTC", "discovered_at": "2026-10-03T08:40:26.000Z" }, { "id": 149961, "urlhaus_id": "3927430", "url": "http://112.198.238.18:40445/i", "host": "112.198.238.18", "host_ip": "112.198.238.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 08:39:19 UTC", "discovered_at": "2026-10-03T08:39:19.000Z" }, { "id": 149962, "urlhaus_id": "3927429", "url": "http://222.127.71.141:43883/i", "host": "222.127.71.141", "host_ip": "222.127.71.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 08:32:20 UTC", "discovered_at": "2026-10-03T08:32:20.000Z" }, { "id": 149963, "urlhaus_id": "3927428", "url": "http://125.166.200.185:58354/i", "host": "125.166.200.185", "host_ip": "125.166.200.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 08:32:18 UTC", "discovered_at": "2026-10-03T08:32:18.000Z" }, { "id": 149967, "urlhaus_id": "3927427", "url": "http://222.127.71.141:43883/bin.sh", "host": "222.127.71.141", "host_ip": "222.127.71.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 08:32:13 UTC", "discovered_at": "2026-10-03T08:32:13.000Z" }, { "id": 149966, "urlhaus_id": "3927426", "url": "http://111.88.7.48:38141/bin.sh", "host": "111.88.7.48", "host_ip": "111.88.7.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 08:32:13 UTC", "discovered_at": "2026-10-03T08:32:13.000Z" }, { "id": 149965, "urlhaus_id": "3927425", "url": "http://125.45.48.154:52093/i", "host": "125.45.48.154", "host_ip": "125.45.48.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:32:13 UTC", "discovered_at": "2026-10-03T08:32:13.000Z" }, { "id": 149964, "urlhaus_id": "3927424", "url": "http://46.10.44.157:45658/bin.sh", "host": "46.10.44.157", "host_ip": "46.10.44.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:32:13 UTC", "discovered_at": "2026-10-03T08:32:13.000Z" }, { "id": 149968, "urlhaus_id": "3927423", "url": "http://113.230.24.226:38270/bin.sh", "host": "113.230.24.226", "host_ip": "113.230.24.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:18:12 UTC", "discovered_at": "2026-10-03T08:18:12.000Z" }, { "id": 149972, "urlhaus_id": "3927422", "url": "http://105.225.99.162:57309/bin.sh", "host": "105.225.99.162", "host_ip": "105.225.99.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 08:17:16 UTC", "discovered_at": "2026-10-03T08:17:16.000Z" }, { "id": 149971, "urlhaus_id": "3927421", "url": "http://113.237.245.190:60523/i", "host": "113.237.245.190", "host_ip": "113.237.245.190", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:17:16 UTC", "discovered_at": "2026-10-03T08:17:16.000Z" }, { "id": 149970, "urlhaus_id": "3927420", "url": "http://42.238.248.174:47417/i", "host": "42.238.248.174", "host_ip": "42.238.248.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 08:17:16 UTC", "discovered_at": "2026-10-03T08:17:16.000Z" }, { "id": 149969, "urlhaus_id": "3927419", "url": "http://125.44.188.225:39813/i", "host": "125.44.188.225", "host_ip": "125.44.188.225", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 08:17:16 UTC", "discovered_at": "2026-10-03T08:17:16.000Z" }, { "id": 149973, "urlhaus_id": "3927418", "url": "http://115.55.54.132:41453/bin.sh", "host": "115.55.54.132", "host_ip": "115.55.54.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 08:17:15 UTC", "discovered_at": "2026-10-03T08:17:15.000Z" }, { "id": 149974, "urlhaus_id": "3927417", "url": "http://200.115.102.2:35242/bin.sh", "host": "200.115.102.2", "host_ip": "200.115.102.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 08:07:26 UTC", "discovered_at": "2026-10-03T08:07:26.000Z" }, { "id": 149976, "urlhaus_id": "3927416", "url": "http://116.140.74.235:52062/i", "host": "116.140.74.235", "host_ip": "116.140.74.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:01:17 UTC", "discovered_at": "2026-10-03T08:01:17.000Z" }, { "id": 149975, "urlhaus_id": "3927415", "url": "http://125.45.48.154:52093/bin.sh", "host": "125.45.48.154", "host_ip": "125.45.48.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 08:01:17 UTC", "discovered_at": "2026-10-03T08:01:17.000Z" }, { "id": 149977, "urlhaus_id": "3927414", "url": "http://37.28.177.69:40833/bin.sh", "host": "37.28.177.69", "host_ip": "37.28.177.69", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 07:47:21 UTC", "discovered_at": "2026-10-03T07:47:21.000Z" }, { "id": 149984, "urlhaus_id": "3927413", "url": "http://115.62.214.150:34361/i", "host": "115.62.214.150", "host_ip": "115.62.214.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:47:16 UTC", "discovered_at": "2026-10-03T07:47:16.000Z" }, { "id": 149983, "urlhaus_id": "3927412", "url": "http://125.44.188.225:39813/bin.sh", "host": "125.44.188.225", "host_ip": "125.44.188.225", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:47:16 UTC", "discovered_at": "2026-10-03T07:47:16.000Z" }, { "id": 149982, "urlhaus_id": "3927411", "url": "http://176.65.189.82:59488/i", "host": "176.65.189.82", "host_ip": "176.65.189.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:47:16 UTC", "discovered_at": "2026-10-03T07:47:16.000Z" }, { "id": 149981, "urlhaus_id": "3927410", "url": "http://179.49.213.85:58757/i", "host": "179.49.213.85", "host_ip": "179.49.213.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 07:47:16 UTC", "discovered_at": "2026-10-03T07:47:16.000Z" }, { "id": 149980, "urlhaus_id": "3927409", "url": "http://118.96.94.49:47838/i", "host": "118.96.94.49", "host_ip": "118.96.94.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 07:47:16 UTC", "discovered_at": "2026-10-03T07:47:16.000Z" }, { "id": 149979, "urlhaus_id": "3927408", "url": "http://163.142.84.253:55570/i", "host": "163.142.84.253", "host_ip": "163.142.84.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 07:47:16 UTC", "discovered_at": "2026-10-03T07:47:16.000Z" }, { "id": 149978, "urlhaus_id": "3927407", "url": "http://42.238.248.174:47417/bin.sh", "host": "42.238.248.174", "host_ip": "42.238.248.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:47:16 UTC", "discovered_at": "2026-10-03T07:47:16.000Z" }, { "id": 149985, "urlhaus_id": "3927406", "url": "http://110.186.231.117:35755/bin.sh", "host": "110.186.231.117", "host_ip": "110.186.231.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 07:37:19 UTC", "discovered_at": "2026-10-03T07:37:19.000Z" }, { "id": 149988, "urlhaus_id": "3927405", "url": "http://175.30.115.231:40778/i", "host": "175.30.115.231", "host_ip": "175.30.115.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 07:32:13 UTC", "discovered_at": "2026-10-03T07:32:13.000Z" }, { "id": 149987, "urlhaus_id": "3927404", "url": "http://113.239.80.45:42790/i", "host": "113.239.80.45", "host_ip": "113.239.80.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 07:32:13 UTC", "discovered_at": "2026-10-03T07:32:13.000Z" }, { "id": 149986, "urlhaus_id": "3927403", "url": "http://27.207.228.55:58673/i", "host": "27.207.228.55", "host_ip": "27.207.228.55", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:32:13 UTC", "discovered_at": "2026-10-03T07:32:13.000Z" }, { "id": 149989, "urlhaus_id": "3927402", "url": "http://163.142.92.175:33778/i", "host": "163.142.92.175", "host_ip": "163.142.92.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 07:28:25 UTC", "discovered_at": "2026-10-03T07:28:25.000Z" }, { "id": 149990, "urlhaus_id": "3927401", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/mko2.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe", "last_online": null, "first_seen": "2026-10-03 07:18:11 UTC", "discovered_at": "2026-10-03T07:18:11.000Z" }, { "id": 149991, "urlhaus_id": "3927400", "url": "http://118.96.94.49:47838/bin.sh", "host": "118.96.94.49", "host_ip": "118.96.94.49", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 07:17:30 UTC", "discovered_at": "2026-10-03T07:17:30.000Z" }, { "id": 149993, "urlhaus_id": "3927399", "url": "http://163.142.84.253:55570/bin.sh", "host": "163.142.84.253", "host_ip": "163.142.84.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 07:17:13 UTC", "discovered_at": "2026-10-03T07:17:13.000Z" }, { "id": 149992, "urlhaus_id": "3927398", "url": "http://125.40.122.6:35820/i", "host": "125.40.122.6", "host_ip": "125.40.122.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:17:13 UTC", "discovered_at": "2026-10-03T07:17:13.000Z" }, { "id": 149995, "urlhaus_id": "3927397", "url": "http://27.207.228.55:58673/bin.sh", "host": "27.207.228.55", "host_ip": "27.207.228.55", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:17:12 UTC", "discovered_at": "2026-10-03T07:17:12.000Z" }, { "id": 149994, "urlhaus_id": "3927396", "url": "http://179.49.213.85:58757/bin.sh", "host": "179.49.213.85", "host_ip": "179.49.213.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 07:17:12 UTC", "discovered_at": "2026-10-03T07:17:12.000Z" }, { "id": 149996, "urlhaus_id": "3927395", "url": "http://105.187.30.149:39781/bin.sh", "host": "105.187.30.149", "host_ip": "105.187.30.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 07:08:19 UTC", "discovered_at": "2026-10-03T07:08:19.000Z" }, { "id": 149998, "urlhaus_id": "3927394", "url": "http://94.26.106.32/Binarys/Owari.m68k", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:04:16 UTC", "discovered_at": "2026-10-03T07:04:16.000Z" }, { "id": 149997, "urlhaus_id": "3927393", "url": "http://94.26.106.32/Binarys/Owari.arm7", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:04:16 UTC", "discovered_at": "2026-10-03T07:04:16.000Z" }, { "id": 150001, "urlhaus_id": "3927392", "url": "http://94.26.106.32/Binarys/Owari.mips", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:04:10 UTC", "discovered_at": "2026-10-03T07:04:10.000Z" }, { "id": 150000, "urlhaus_id": "3927391", "url": "http://94.26.106.32/Binarys/Owari.x86", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:04:10 UTC", "discovered_at": "2026-10-03T07:04:10.000Z" }, { "id": 149999, "urlhaus_id": "3927390", "url": "http://94.26.106.32/Binarys/Owari.arm5", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:04:10 UTC", "discovered_at": "2026-10-03T07:04:10.000Z" }, { "id": 150002, "urlhaus_id": "3927389", "url": "http://94.26.106.32/Binarys/Owari.arm6", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:03:25 UTC", "discovered_at": "2026-10-03T07:03:25.000Z" }, { "id": 150006, "urlhaus_id": "3927388", "url": "http://94.26.106.32/Binarys/Owari.arm", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:03:24 UTC", "discovered_at": "2026-10-03T07:03:24.000Z" }, { "id": 150005, "urlhaus_id": "3927387", "url": "http://94.26.106.32/Binarys/Owari.ppc", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:03:24 UTC", "discovered_at": "2026-10-03T07:03:24.000Z" }, { "id": 150004, "urlhaus_id": "3927386", "url": "http://94.26.106.32/Binarys/Owari.sh4", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:03:24 UTC", "discovered_at": "2026-10-03T07:03:24.000Z" }, { "id": 150003, "urlhaus_id": "3927385", "url": "http://94.26.106.32/Binarys/Owari.mpsl", "host": "94.26.106.32", "host_ip": "94.26.106.32", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-03 07:03:24 UTC", "discovered_at": "2026-10-03T07:03:24.000Z" }, { "id": 150007, "urlhaus_id": "3927384", "url": "http://42.7.113.111:57947/bin.sh", "host": "42.7.113.111", "host_ip": "42.7.113.111", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 07:02:24 UTC", "discovered_at": "2026-10-03T07:02:24.000Z" }, { "id": 150008, "urlhaus_id": "3927383", "url": "http://41.216.226.213:51974/i", "host": "41.216.226.213", "host_ip": "41.216.226.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:02:14 UTC", "discovered_at": "2026-10-03T07:02:14.000Z" }, { "id": 150014, "urlhaus_id": "3927382", "url": "http://220.201.25.203:34621/i", "host": "220.201.25.203", "host_ip": "220.201.25.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 07:02:12 UTC", "discovered_at": "2026-10-03T07:02:12.000Z" }, { "id": 150013, "urlhaus_id": "3927381", "url": "http://113.239.80.45:42790/bin.sh", "host": "113.239.80.45", "host_ip": "113.239.80.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 07:02:12 UTC", "discovered_at": "2026-10-03T07:02:12.000Z" }, { "id": 150012, "urlhaus_id": "3927380", "url": "http://59.97.253.147:52004/i", "host": "59.97.253.147", "host_ip": "59.97.253.147", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:02:12 UTC", "discovered_at": "2026-10-03T07:02:12.000Z" }, { "id": 150011, "urlhaus_id": "3927379", "url": "http://115.63.8.6:60088/i", "host": "115.63.8.6", "host_ip": "115.63.8.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:02:12 UTC", "discovered_at": "2026-10-03T07:02:12.000Z" }, { "id": 150010, "urlhaus_id": "3927378", "url": "http://196.191.231.12:59905/i", "host": "196.191.231.12", "host_ip": "196.191.231.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 07:02:12 UTC", "discovered_at": "2026-10-03T07:02:12.000Z" }, { "id": 150009, "urlhaus_id": "3927377", "url": "http://115.52.98.96:39274/bin.sh", "host": "115.52.98.96", "host_ip": "115.52.98.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 07:02:12 UTC", "discovered_at": "2026-10-03T07:02:12.000Z" }, { "id": 150015, "urlhaus_id": "3927376", "url": "http://196.191.231.12:59905/bin.sh", "host": "196.191.231.12", "host_ip": "196.191.231.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:47:13 UTC", "discovered_at": "2026-10-03T06:47:13.000Z" }, { "id": 150017, "urlhaus_id": "3927375", "url": "http://182.119.89.238:41599/i", "host": "182.119.89.238", "host_ip": "182.119.89.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:47:12 UTC", "discovered_at": "2026-10-03T06:47:12.000Z" }, { "id": 150016, "urlhaus_id": "3927374", "url": "http://60.23.236.99:38886/i", "host": "60.23.236.99", "host_ip": "60.23.236.99", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 06:47:12 UTC", "discovered_at": "2026-10-03T06:47:12.000Z" }, { "id": 150018, "urlhaus_id": "3927373", "url": "http://115.56.146.196:35484/i", "host": "115.56.146.196", "host_ip": "115.56.146.196", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:32:25 UTC", "discovered_at": "2026-10-03T06:32:25.000Z" }, { "id": 150020, "urlhaus_id": "3927372", "url": "http://59.97.253.147:52004/bin.sh", "host": "59.97.253.147", "host_ip": "59.97.253.147", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 06:32:13 UTC", "discovered_at": "2026-10-03T06:32:13.000Z" }, { "id": 150019, "urlhaus_id": "3927371", "url": "http://113.53.121.124:37550/i", "host": "113.53.121.124", "host_ip": "113.53.121.124", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:32:13 UTC", "discovered_at": "2026-10-03T06:32:13.000Z" }, { "id": 150022, "urlhaus_id": "3927370", "url": "http://221.14.17.152:59802/bin.sh", "host": "221.14.17.152", "host_ip": "221.14.17.152", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 06:32:12 UTC", "discovered_at": "2026-10-03T06:32:12.000Z" }, { "id": 150021, "urlhaus_id": "3927369", "url": "http://182.121.228.95:50660/i", "host": "182.121.228.95", "host_ip": "182.121.228.95", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 06:32:12 UTC", "discovered_at": "2026-10-03T06:32:12.000Z" }, { "id": 150023, "urlhaus_id": "3927368", "url": "http://115.63.8.6:60088/bin.sh", "host": "115.63.8.6", "host_ip": "115.63.8.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 06:32:11 UTC", "discovered_at": "2026-10-03T06:32:11.000Z" }, { "id": 150024, "urlhaus_id": "3927367", "url": "https://expirience.icu/api/file-share/883e3cde-f663-4e50-bc61-84dca8916960/download", "host": "expirience.icu", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Overlord, rat", "last_online": null, "first_seen": "2026-10-03 06:30:19 UTC", "discovered_at": "2026-10-03T06:30:19.000Z" }, { "id": 150025, "urlhaus_id": "3927366", "url": "https://expirience.icu/assets/pytrim.zip", "host": "expirience.icu", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Overlord, rat", "last_online": null, "first_seen": "2026-10-03 06:30:16 UTC", "discovered_at": "2026-10-03T06:30:16.000Z" }, { "id": 150026, "urlhaus_id": "3927365", "url": "http://185.99.97.21:5001/one.exe", "host": "185.99.97.21", "host_ip": "185.99.97.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rustystealer", "last_online": null, "first_seen": "2026-10-03 06:27:21 UTC", "discovered_at": "2026-10-03T06:27:21.000Z" }, { "id": 150027, "urlhaus_id": "3927364", "url": "http://185.99.97.21:5001/second.exe", "host": "185.99.97.21", "host_ip": "185.99.97.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rustystealer", "last_online": null, "first_seen": "2026-10-03 06:27:20 UTC", "discovered_at": "2026-10-03T06:27:20.000Z" }, { "id": 150028, "urlhaus_id": "3927363", "url": "http://185.99.97.21:5001/formela.bin", "host": "185.99.97.21", "host_ip": "185.99.97.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 06:27:16 UTC", "discovered_at": "2026-10-03T06:27:16.000Z" }, { "id": 150029, "urlhaus_id": "3927362", "url": "http://91.127.103.137:58536/Mozi.m", "host": "91.127.103.137", "host_ip": "91.127.103.137", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 06:24:13 UTC", "discovered_at": "2026-10-03T06:24:13.000Z" }, { "id": 150030, "urlhaus_id": "3927360", "url": "http://27.203.230.103:46598/bin.sh", "host": "27.203.230.103", "host_ip": "27.203.230.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 06:17:14 UTC", "discovered_at": "2026-10-03T06:17:14.000Z" }, { "id": 150031, "urlhaus_id": "3927359", "url": "http://36.70.235.26:36538/i", "host": "36.70.235.26", "host_ip": "36.70.235.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:16:20 UTC", "discovered_at": "2026-10-03T06:16:20.000Z" }, { "id": 150032, "urlhaus_id": "3927358", "url": "http://182.119.89.238:41599/bin.sh", "host": "182.119.89.238", "host_ip": "182.119.89.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:16:16 UTC", "discovered_at": "2026-10-03T06:16:16.000Z" }, { "id": 150033, "urlhaus_id": "3927357", "url": "http://59.96.138.122:60039/i", "host": "59.96.138.122", "host_ip": "59.96.138.122", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 06:16:14 UTC", "discovered_at": "2026-10-03T06:16:14.000Z" }, { "id": 150035, "urlhaus_id": "3927356", "url": "http://116.207.221.240:59439/bin.sh", "host": "116.207.221.240", "host_ip": "116.207.221.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 06:16:13 UTC", "discovered_at": "2026-10-03T06:16:13.000Z" }, { "id": 150034, "urlhaus_id": "3927355", "url": "http://42.178.60.183:36993/bin.sh", "host": "42.178.60.183", "host_ip": "42.178.60.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 06:16:13 UTC", "discovered_at": "2026-10-03T06:16:13.000Z" }, { "id": 150036, "urlhaus_id": "3927354", "url": "http://196.189.35.226:43789/i", "host": "196.189.35.226", "host_ip": "196.189.35.226", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:16:12 UTC", "discovered_at": "2026-10-03T06:16:12.000Z" }, { "id": 150037, "urlhaus_id": "3927353", "url": "http://95.232.72.185:44433/bin.sh", "host": "95.232.72.185", "host_ip": "95.232.72.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-03 06:15:35 UTC", "discovered_at": "2026-10-03T06:15:35.000Z" }, { "id": 150038, "urlhaus_id": "3927352", "url": "http://clownguard.us/clickfix.exe", "host": "clownguard.us", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 06:15:34 UTC", "discovered_at": "2026-10-03T06:15:34.000Z" }, { "id": 150039, "urlhaus_id": "3927351", "url": "http://78.38.120.12:35789/Mozi.7", "host": "78.38.120.12", "host_ip": "78.38.120.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, iot, Mozi", "last_online": null, "first_seen": "2026-10-03 06:15:24 UTC", "discovered_at": "2026-10-03T06:15:24.000Z" }, { "id": 150041, "urlhaus_id": "3927350", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-arm", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-03 06:15:23 UTC", "discovered_at": "2026-10-03T06:15:23.000Z" }, { "id": 150040, "urlhaus_id": "3927349", "url": "http://176.65.139.157/adb2.sh", "host": "176.65.139.157", "host_ip": "176.65.139.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot", "last_online": null, "first_seen": "2026-10-03 06:15:23 UTC", "discovered_at": "2026-10-03T06:15:23.000Z" }, { "id": 150043, "urlhaus_id": "3927348", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-arm64", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-03 06:15:19 UTC", "discovered_at": "2026-10-03T06:15:19.000Z" }, { "id": 150042, "urlhaus_id": "3927347", "url": "https://astroliper.ac/pack/agent/nodewatchd-linux-amd64", "host": "astroliper.ac", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-03 06:15:19 UTC", "discovered_at": "2026-10-03T06:15:19.000Z" }, { "id": 150047, "urlhaus_id": "3927346", "url": "https://217.60.102.5/sh", "host": "217.60.102.5", "host_ip": "217.60.102.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-03 06:15:18 UTC", "discovered_at": "2026-10-03T06:15:18.000Z" }, { "id": 150046, "urlhaus_id": "3927345", "url": "http://176.65.139.157/fvbig/zerobot.arm64", "host": "176.65.139.157", "host_ip": "176.65.139.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:15:18 UTC", "discovered_at": "2026-10-03T06:15:18.000Z" }, { "id": 150045, "urlhaus_id": "3927344", "url": "http://176.65.139.157/fvbig/zerobot.arm7", "host": "176.65.139.157", "host_ip": "176.65.139.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 06:15:18 UTC", "discovered_at": "2026-10-03T06:15:18.000Z" }, { "id": 150044, "urlhaus_id": "3927343", "url": "http://115.55.55.103:46176/Mozi.a", "host": "115.55.55.103", "host_ip": "115.55.55.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 06:15:18 UTC", "discovered_at": "2026-10-03T06:15:18.000Z" }, { "id": 150048, "urlhaus_id": "3927342", "url": "http://176.65.139.227/bins/$a", "host": "176.65.139.227", "host_ip": "176.65.139.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii", "last_online": null, "first_seen": "2026-10-03 06:15:15 UTC", "discovered_at": "2026-10-03T06:15:15.000Z" }, { "id": 150049, "urlhaus_id": "3927341", "url": "http://182.121.228.95:50660/bin.sh", "host": "182.121.228.95", "host_ip": "182.121.228.95", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 06:02:14 UTC", "discovered_at": "2026-10-03T06:02:14.000Z" }, { "id": 150050, "urlhaus_id": "3927340", "url": "http://222.246.15.246:60522/i", "host": "222.246.15.246", "host_ip": "222.246.15.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 05:59:31 UTC", "discovered_at": "2026-10-03T05:59:31.000Z" }, { "id": 150051, "urlhaus_id": "3927339", "url": "http://41.149.62.7:36823/i", "host": "41.149.62.7", "host_ip": "41.149.62.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 05:47:14 UTC", "discovered_at": "2026-10-03T05:47:14.000Z" }, { "id": 150052, "urlhaus_id": "3927338", "url": "http://182.116.114.207:52281/i", "host": "182.116.114.207", "host_ip": "182.116.114.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 05:47:13 UTC", "discovered_at": "2026-10-03T05:47:13.000Z" }, { "id": 150053, "urlhaus_id": "3927337", "url": "http://103.190.23.91:45769/i", "host": "103.190.23.91", "host_ip": "103.190.23.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 05:44:25 UTC", "discovered_at": "2026-10-03T05:44:25.000Z" }, { "id": 150057, "urlhaus_id": "3927336", "url": "http://182.116.114.207:52281/bin.sh", "host": "182.116.114.207", "host_ip": "182.116.114.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 05:32:13 UTC", "discovered_at": "2026-10-03T05:32:13.000Z" }, { "id": 150056, "urlhaus_id": "3927335", "url": "http://125.41.171.43:53067/bin.sh", "host": "125.41.171.43", "host_ip": "125.41.171.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 05:32:13 UTC", "discovered_at": "2026-10-03T05:32:13.000Z" }, { "id": 150055, "urlhaus_id": "3927334", "url": "http://31.129.2.46:55739/i", "host": "31.129.2.46", "host_ip": "31.129.2.46", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 05:32:13 UTC", "discovered_at": "2026-10-03T05:32:13.000Z" }, { "id": 150054, "urlhaus_id": "3927333", "url": "http://123.4.179.131:37400/bin.sh", "host": "123.4.179.131", "host_ip": "123.4.179.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 05:32:13 UTC", "discovered_at": "2026-10-03T05:32:13.000Z" }, { "id": 150058, "urlhaus_id": "3927332", "url": "http://113.230.27.216:42959/i", "host": "113.230.27.216", "host_ip": "113.230.27.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 05:17:26 UTC", "discovered_at": "2026-10-03T05:17:26.000Z" }, { "id": 150059, "urlhaus_id": "3927331", "url": "http://216.126.86.76:60971/i", "host": "216.126.86.76", "host_ip": "216.126.86.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 05:14:28 UTC", "discovered_at": "2026-10-03T05:14:28.000Z" }, { "id": 150060, "urlhaus_id": "3927330", "url": "http://182.126.92.177:43112/i", "host": "182.126.92.177", "host_ip": "182.126.92.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 05:02:13 UTC", "discovered_at": "2026-10-03T05:02:13.000Z" }, { "id": 150062, "urlhaus_id": "3927329", "url": "http://196.190.69.149:45695/i", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 05:02:12 UTC", "discovered_at": "2026-10-03T05:02:12.000Z" }, { "id": 150061, "urlhaus_id": "3927328", "url": "http://115.62.57.106:60731/i", "host": "115.62.57.106", "host_ip": "115.62.57.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 05:02:12 UTC", "discovered_at": "2026-10-03T05:02:12.000Z" }, { "id": 150063, "urlhaus_id": "3927327", "url": "http://114.239.199.121:49462/i", "host": "114.239.199.121", "host_ip": "114.239.199.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 04:46:14 UTC", "discovered_at": "2026-10-03T04:46:14.000Z" }, { "id": 150064, "urlhaus_id": "3927326", "url": "http://46.236.65.12:60086/i", "host": "46.236.65.12", "host_ip": "46.236.65.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:46:13 UTC", "discovered_at": "2026-10-03T04:46:13.000Z" }, { "id": 150065, "urlhaus_id": "3927325", "url": "http://180.106.249.45:3588/i", "host": "180.106.249.45", "host_ip": "180.106.249.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 04:38:38 UTC", "discovered_at": "2026-10-03T04:38:38.000Z" }, { "id": 150067, "urlhaus_id": "3927324", "url": "http://114.239.199.121:49462/bin.sh", "host": "114.239.199.121", "host_ip": "114.239.199.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 04:32:17 UTC", "discovered_at": "2026-10-03T04:32:17.000Z" }, { "id": 150066, "urlhaus_id": "3927323", "url": "http://115.62.57.106:60731/bin.sh", "host": "115.62.57.106", "host_ip": "115.62.57.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:32:17 UTC", "discovered_at": "2026-10-03T04:32:17.000Z" }, { "id": 150069, "urlhaus_id": "3927322", "url": "http://37.48.179.81:57685/i", "host": "37.48.179.81", "host_ip": "37.48.179.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:32:16 UTC", "discovered_at": "2026-10-03T04:32:16.000Z" }, { "id": 150068, "urlhaus_id": "3927321", "url": "http://196.189.197.131:59809/i", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 04:32:16 UTC", "discovered_at": "2026-10-03T04:32:16.000Z" }, { "id": 150070, "urlhaus_id": "3927320", "url": "http://115.52.98.96:39274/i", "host": "115.52.98.96", "host_ip": "115.52.98.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 04:29:23 UTC", "discovered_at": "2026-10-03T04:29:23.000Z" }, { "id": 150071, "urlhaus_id": "3927319", "url": "http://27.215.124.140:55542/i", "host": "27.215.124.140", "host_ip": "27.215.124.140", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 04:27:31 UTC", "discovered_at": "2026-10-03T04:27:31.000Z" }, { "id": 150072, "urlhaus_id": "3927318", "url": "http://175.147.94.20:52805/i", "host": "175.147.94.20", "host_ip": "175.147.94.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 04:20:27 UTC", "discovered_at": "2026-10-03T04:20:27.000Z" }, { "id": 150073, "urlhaus_id": "3927317", "url": "http://103.152.100.5:55221/i", "host": "103.152.100.5", "host_ip": "103.152.100.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:17:12 UTC", "discovered_at": "2026-10-03T04:17:12.000Z" }, { "id": 150074, "urlhaus_id": "3927316", "url": "http://114.226.193.59:46296/i", "host": "114.226.193.59", "host_ip": "114.226.193.59", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 04:16:16 UTC", "discovered_at": "2026-10-03T04:16:16.000Z" }, { "id": 150077, "urlhaus_id": "3927315", "url": "http://37.48.179.81:57685/bin.sh", "host": "37.48.179.81", "host_ip": "37.48.179.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:16:15 UTC", "discovered_at": "2026-10-03T04:16:15.000Z" }, { "id": 150076, "urlhaus_id": "3927314", "url": "http://103.171.168.74:45307/i", "host": "103.171.168.74", "host_ip": "103.171.168.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:16:15 UTC", "discovered_at": "2026-10-03T04:16:15.000Z" }, { "id": 150075, "urlhaus_id": "3927313", "url": "http://123.11.13.78:34717/i", "host": "123.11.13.78", "host_ip": "123.11.13.78", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:16:15 UTC", "discovered_at": "2026-10-03T04:16:15.000Z" }, { "id": 150078, "urlhaus_id": "3927312", "url": "http://115.55.55.103:46176/i", "host": "115.55.55.103", "host_ip": "115.55.55.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-03 04:05:18 UTC", "discovered_at": "2026-10-03T04:05:18.000Z" }, { "id": 150080, "urlhaus_id": "3927311", "url": "http://115.52.179.133:51388/i", "host": "115.52.179.133", "host_ip": "115.52.179.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 04:02:14 UTC", "discovered_at": "2026-10-03T04:02:14.000Z" }, { "id": 150079, "urlhaus_id": "3927310", "url": "http://105.224.47.137:37731/i", "host": "105.224.47.137", "host_ip": "105.224.47.137", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 04:02:14 UTC", "discovered_at": "2026-10-03T04:02:14.000Z" }, { "id": 150081, "urlhaus_id": "3927309", "url": "http://182.127.160.130:34533/bin.sh", "host": "182.127.160.130", "host_ip": "182.127.160.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 03:46:28 UTC", "discovered_at": "2026-10-03T03:46:28.000Z" }, { "id": 150082, "urlhaus_id": "3927308", "url": "http://171.113.230.26:43009/i", "host": "171.113.230.26", "host_ip": "171.113.230.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:46:17 UTC", "discovered_at": "2026-10-03T03:46:17.000Z" }, { "id": 150084, "urlhaus_id": "3927307", "url": "http://103.152.100.5:55221/bin.sh", "host": "103.152.100.5", "host_ip": "103.152.100.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 03:46:16 UTC", "discovered_at": "2026-10-03T03:46:16.000Z" }, { "id": 150083, "urlhaus_id": "3927306", "url": "http://113.236.122.119:56180/bin.sh", "host": "113.236.122.119", "host_ip": "113.236.122.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 03:46:16 UTC", "discovered_at": "2026-10-03T03:46:16.000Z" }, { "id": 150085, "urlhaus_id": "3927305", "url": "http://115.59.32.45:50104/i", "host": "115.59.32.45", "host_ip": "115.59.32.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 03:39:25 UTC", "discovered_at": "2026-10-03T03:39:25.000Z" }, { "id": 150086, "urlhaus_id": "3927304", "url": "http://115.59.32.45:50104/bin.sh", "host": "115.59.32.45", "host_ip": "115.59.32.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 03:33:22 UTC", "discovered_at": "2026-10-03T03:33:22.000Z" }, { "id": 150088, "urlhaus_id": "3927303", "url": "http://36.70.109.231:36088/bin.sh", "host": "36.70.109.231", "host_ip": "36.70.109.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:32:19 UTC", "discovered_at": "2026-10-03T03:32:19.000Z" }, { "id": 150087, "urlhaus_id": "3927302", "url": "http://36.70.109.231:36088/i", "host": "36.70.109.231", "host_ip": "36.70.109.231", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:32:19 UTC", "discovered_at": "2026-10-03T03:32:19.000Z" }, { "id": 150090, "urlhaus_id": "3927301", "url": "http://105.225.111.24:58225/i", "host": "105.225.111.24", "host_ip": "105.225.111.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:32:15 UTC", "discovered_at": "2026-10-03T03:32:15.000Z" }, { "id": 150089, "urlhaus_id": "3927300", "url": "http://115.55.47.168:55594/bin.sh", "host": "115.55.47.168", "host_ip": "115.55.47.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 03:32:15 UTC", "discovered_at": "2026-10-03T03:32:15.000Z" }, { "id": 150092, "urlhaus_id": "3927299", "url": "http://119.114.62.109:50050/i", "host": "119.114.62.109", "host_ip": "119.114.62.109", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 03:32:14 UTC", "discovered_at": "2026-10-03T03:32:14.000Z" }, { "id": 150091, "urlhaus_id": "3927298", "url": "http://196.189.98.77:54261/i", "host": "196.189.98.77", "host_ip": "196.189.98.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:32:14 UTC", "discovered_at": "2026-10-03T03:32:14.000Z" }, { "id": 150093, "urlhaus_id": "3927297", "url": "http://95.232.72.185:44433/i", "host": "95.232.72.185", "host_ip": "95.232.72.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-03 03:30:56 UTC", "discovered_at": "2026-10-03T03:30:56.000Z" }, { "id": 150094, "urlhaus_id": "3927296", "url": "http://103.172.186.170:34412/bin.sh", "host": "103.172.186.170", "host_ip": "103.172.186.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 03:30:23 UTC", "discovered_at": "2026-10-03T03:30:23.000Z" }, { "id": 150095, "urlhaus_id": "3927295", "url": "http://115.50.111.203:47986/i", "host": "115.50.111.203", "host_ip": "115.50.111.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 03:17:14 UTC", "discovered_at": "2026-10-03T03:17:14.000Z" }, { "id": 150097, "urlhaus_id": "3927294", "url": "http://171.113.230.26:43009/bin.sh", "host": "171.113.230.26", "host_ip": "171.113.230.26", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:17:13 UTC", "discovered_at": "2026-10-03T03:17:13.000Z" }, { "id": 150096, "urlhaus_id": "3927293", "url": "http://42.239.232.94:46489/i", "host": "42.239.232.94", "host_ip": "42.239.232.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 03:17:13 UTC", "discovered_at": "2026-10-03T03:17:13.000Z" }, { "id": 150098, "urlhaus_id": "3927292", "url": "http://121.31.194.18:48899/i", "host": "121.31.194.18", "host_ip": "121.31.194.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:02:33 UTC", "discovered_at": "2026-10-03T03:02:33.000Z" }, { "id": 150099, "urlhaus_id": "3927291", "url": "http://36.71.23.92:55622/i", "host": "36.71.23.92", "host_ip": "36.71.23.92", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 03:01:22 UTC", "discovered_at": "2026-10-03T03:01:22.000Z" }, { "id": 150100, "urlhaus_id": "3927290", "url": "http://59.96.138.185:46768/i", "host": "59.96.138.185", "host_ip": "59.96.138.185", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 03:01:13 UTC", "discovered_at": "2026-10-03T03:01:13.000Z" }, { "id": 150101, "urlhaus_id": "3927289", "url": "http://123.14.32.129:52698/bin.sh", "host": "123.14.32.129", "host_ip": "123.14.32.129", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 02:56:26 UTC", "discovered_at": "2026-10-03T02:56:26.000Z" }, { "id": 150102, "urlhaus_id": "3927288", "url": "http://112.198.193.5:43648/i", "host": "112.198.193.5", "host_ip": "112.198.193.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 02:46:30 UTC", "discovered_at": "2026-10-03T02:46:30.000Z" }, { "id": 150103, "urlhaus_id": "3927287", "url": "http://42.239.232.94:46489/bin.sh", "host": "42.239.232.94", "host_ip": "42.239.232.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 02:46:22 UTC", "discovered_at": "2026-10-03T02:46:22.000Z" }, { "id": 150104, "urlhaus_id": "3927286", "url": "http://61.52.158.123:46875/i", "host": "61.52.158.123", "host_ip": "61.52.158.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 02:46:17 UTC", "discovered_at": "2026-10-03T02:46:17.000Z" }, { "id": 150105, "urlhaus_id": "3927285", "url": "http://42.85.218.119:46445/i", "host": "42.85.218.119", "host_ip": "42.85.218.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 02:32:17 UTC", "discovered_at": "2026-10-03T02:32:17.000Z" }, { "id": 150106, "urlhaus_id": "3927284", "url": "http://59.97.255.151:40454/i", "host": "59.97.255.151", "host_ip": "59.97.255.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 02:29:21 UTC", "discovered_at": "2026-10-03T02:29:21.000Z" }, { "id": 150107, "urlhaus_id": "3927283", "url": "http://113.128.65.219:40201/bin.sh", "host": "113.128.65.219", "host_ip": "113.128.65.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 02:17:18 UTC", "discovered_at": "2026-10-03T02:17:18.000Z" }, { "id": 150108, "urlhaus_id": "3927282", "url": "http://219.155.200.232:42438/i", "host": "219.155.200.232", "host_ip": "219.155.200.232", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 02:17:13 UTC", "discovered_at": "2026-10-03T02:17:13.000Z" }, { "id": 150111, "urlhaus_id": "3927281", "url": "http://115.48.148.67:52424/bin.sh", "host": "115.48.148.67", "host_ip": "115.48.148.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 02:17:11 UTC", "discovered_at": "2026-10-03T02:17:11.000Z" }, { "id": 150110, "urlhaus_id": "3927280", "url": "http://221.14.37.255:37089/i", "host": "221.14.37.255", "host_ip": "221.14.37.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 02:17:11 UTC", "discovered_at": "2026-10-03T02:17:11.000Z" }, { "id": 150109, "urlhaus_id": "3927279", "url": "http://60.23.234.249:37939/i", "host": "60.23.234.249", "host_ip": "60.23.234.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 02:17:11 UTC", "discovered_at": "2026-10-03T02:17:11.000Z" }, { "id": 150112, "urlhaus_id": "3927278", "url": "http://61.52.158.123:46875/bin.sh", "host": "61.52.158.123", "host_ip": "61.52.158.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 02:16:14 UTC", "discovered_at": "2026-10-03T02:16:14.000Z" }, { "id": 150113, "urlhaus_id": "3927277", "url": "http://178.16.54.109/suckdick.exe", "host": "178.16.54.109", "host_ip": "178.16.54.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": "dropped-by-Phorpiex, phorpiex", "last_online": null, "first_seen": "2026-10-03 02:10:16 UTC", "discovered_at": "2026-10-03T02:10:16.000Z" }, { "id": 150114, "urlhaus_id": "3927276", "url": "http://59.97.255.151:40454/bin.sh", "host": "59.97.255.151", "host_ip": "59.97.255.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 02:02:26 UTC", "discovered_at": "2026-10-03T02:02:26.000Z" }, { "id": 150115, "urlhaus_id": "3927275", "url": "http://113.238.103.56:38636/i", "host": "113.238.103.56", "host_ip": "113.238.103.56", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 02:02:15 UTC", "discovered_at": "2026-10-03T02:02:15.000Z" }, { "id": 150120, "urlhaus_id": "3927274", "url": "http://85.202.163.162/arm6", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:26 UTC", "discovered_at": "2026-10-03T01:59:26.000Z" }, { "id": 150119, "urlhaus_id": "3927273", "url": "http://85.202.163.162/i486", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:26 UTC", "discovered_at": "2026-10-03T01:59:26.000Z" }, { "id": 150118, "urlhaus_id": "3927272", "url": "http://85.202.163.162/m68k", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:26 UTC", "discovered_at": "2026-10-03T01:59:26.000Z" }, { "id": 150117, "urlhaus_id": "3927271", "url": "http://85.202.163.162/ppc", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:26 UTC", "discovered_at": "2026-10-03T01:59:26.000Z" }, { "id": 150116, "urlhaus_id": "3927270", "url": "http://85.202.163.162/mips", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:26 UTC", "discovered_at": "2026-10-03T01:59:26.000Z" }, { "id": 150123, "urlhaus_id": "3927269", "url": "http://85.202.163.162/i686", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:24 UTC", "discovered_at": "2026-10-03T01:59:24.000Z" }, { "id": 150122, "urlhaus_id": "3927268", "url": "http://85.202.163.162/x86_64", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:24 UTC", "discovered_at": "2026-10-03T01:59:24.000Z" }, { "id": 150121, "urlhaus_id": "3927267", "url": "http://85.202.163.162/arm7", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:24 UTC", "discovered_at": "2026-10-03T01:59:24.000Z" }, { "id": 150127, "urlhaus_id": "3927266", "url": "http://85.202.163.162/powerpc-440fp", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:23 UTC", "discovered_at": "2026-10-03T01:59:23.000Z" }, { "id": 150126, "urlhaus_id": "3927265", "url": "http://85.202.163.162/i586", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:23 UTC", "discovered_at": "2026-10-03T01:59:23.000Z" }, { "id": 150125, "urlhaus_id": "3927264", "url": "http://85.202.163.162/sh4", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:23 UTC", "discovered_at": "2026-10-03T01:59:23.000Z" }, { "id": 150124, "urlhaus_id": "3927263", "url": "http://85.202.163.162/arm4", "host": "85.202.163.162", "host_ip": "85.202.163.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:23 UTC", "discovered_at": "2026-10-03T01:59:23.000Z" }, { "id": 150129, "urlhaus_id": "3927262", "url": "http://182.122.110.235:45263/bin.sh", "host": "182.122.110.235", "host_ip": "182.122.110.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 01:59:22 UTC", "discovered_at": "2026-10-03T01:59:22.000Z" }, { "id": 150128, "urlhaus_id": "3927261", "url": "http://185.213.240.64/hiddenbin/Space.spc", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-03 01:59:22 UTC", "discovered_at": "2026-10-03T01:59:22.000Z" }, { "id": 150130, "urlhaus_id": "3927260", "url": "http://60.23.234.249:37939/bin.sh", "host": "60.23.234.249", "host_ip": "60.23.234.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 01:47:12 UTC", "discovered_at": "2026-10-03T01:47:12.000Z" }, { "id": 150131, "urlhaus_id": "3927259", "url": "http://79.106.231.174:47126/bin.sh", "host": "79.106.231.174", "host_ip": "79.106.231.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 01:35:25 UTC", "discovered_at": "2026-10-03T01:35:25.000Z" }, { "id": 150132, "urlhaus_id": "3927258", "url": "http://27.202.233.40:54686/bin.sh", "host": "27.202.233.40", "host_ip": "27.202.233.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 01:35:20 UTC", "discovered_at": "2026-10-03T01:35:20.000Z" }, { "id": 150135, "urlhaus_id": "3927257", "url": "http://105.184.84.90:34013/i", "host": "105.184.84.90", "host_ip": "105.184.84.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 01:32:16 UTC", "discovered_at": "2026-10-03T01:32:16.000Z" }, { "id": 150134, "urlhaus_id": "3927256", "url": "http://42.239.238.105:59721/i", "host": "42.239.238.105", "host_ip": "42.239.238.105", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 01:32:16 UTC", "discovered_at": "2026-10-03T01:32:16.000Z" }, { "id": 150133, "urlhaus_id": "3927255", "url": "http://175.147.88.21:37270/i", "host": "175.147.88.21", "host_ip": "175.147.88.21", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 01:32:16 UTC", "discovered_at": "2026-10-03T01:32:16.000Z" }, { "id": 150137, "urlhaus_id": "3927254", "url": "http://182.118.245.176:59868/i", "host": "182.118.245.176", "host_ip": "182.118.245.176", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 01:32:15 UTC", "discovered_at": "2026-10-03T01:32:15.000Z" }, { "id": 150136, "urlhaus_id": "3927253", "url": "http://45.171.124.23:48370/i", "host": "45.171.124.23", "host_ip": "45.171.124.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 01:32:15 UTC", "discovered_at": "2026-10-03T01:32:15.000Z" }, { "id": 150138, "urlhaus_id": "3927252", "url": "http://60.188.197.62:41585/bin.sh", "host": "60.188.197.62", "host_ip": "60.188.197.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-03 01:30:26 UTC", "discovered_at": "2026-10-03T01:30:26.000Z" }, { "id": 150139, "urlhaus_id": "3927251", "url": "http://42.176.197.73:53327/i", "host": "42.176.197.73", "host_ip": "42.176.197.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 01:17:13 UTC", "discovered_at": "2026-10-03T01:17:13.000Z" }, { "id": 150141, "urlhaus_id": "3927250", "url": "http://182.118.245.176:59868/bin.sh", "host": "182.118.245.176", "host_ip": "182.118.245.176", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 01:02:17 UTC", "discovered_at": "2026-10-03T01:02:17.000Z" }, { "id": 150140, "urlhaus_id": "3927249", "url": "http://61.52.219.186:56983/i", "host": "61.52.219.186", "host_ip": "61.52.219.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 01:02:17 UTC", "discovered_at": "2026-10-03T01:02:17.000Z" }, { "id": 150146, "urlhaus_id": "3927248", "url": "http://59.96.137.180:46176/i", "host": "59.96.137.180", "host_ip": "59.96.137.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 01:02:16 UTC", "discovered_at": "2026-10-03T01:02:16.000Z" }, { "id": 150145, "urlhaus_id": "3927247", "url": "http://42.226.78.24:59512/bin.sh", "host": "42.226.78.24", "host_ip": "42.226.78.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 01:02:16 UTC", "discovered_at": "2026-10-03T01:02:16.000Z" }, { "id": 150144, "urlhaus_id": "3927246", "url": "http://42.231.88.16:52149/bin.sh", "host": "42.231.88.16", "host_ip": "42.231.88.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 01:02:16 UTC", "discovered_at": "2026-10-03T01:02:16.000Z" }, { "id": 150143, "urlhaus_id": "3927245", "url": "http://219.157.133.197:42186/i", "host": "219.157.133.197", "host_ip": "219.157.133.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 01:02:16 UTC", "discovered_at": "2026-10-03T01:02:16.000Z" }, { "id": 150142, "urlhaus_id": "3927244", "url": "http://115.54.150.106:57804/bin.sh", "host": "115.54.150.106", "host_ip": "115.54.150.106", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 01:02:16 UTC", "discovered_at": "2026-10-03T01:02:16.000Z" }, { "id": 150147, "urlhaus_id": "3927243", "url": "http://42.228.124.50:32883/i", "host": "42.228.124.50", "host_ip": "42.228.124.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-03 00:55:20 UTC", "discovered_at": "2026-10-03T00:55:20.000Z" }, { "id": 150148, "urlhaus_id": "3927242", "url": "http://36.71.21.118:41861/i", "host": "36.71.21.118", "host_ip": "36.71.21.118", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 00:47:22 UTC", "discovered_at": "2026-10-03T00:47:22.000Z" }, { "id": 150149, "urlhaus_id": "3927241", "url": "http://105.187.30.149:39781/i", "host": "105.187.30.149", "host_ip": "105.187.30.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 00:47:10 UTC", "discovered_at": "2026-10-03T00:47:10.000Z" }, { "id": 150150, "urlhaus_id": "3927240", "url": "http://103.172.186.170:34412/i", "host": "103.172.186.170", "host_ip": "103.172.186.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 00:47:09 UTC", "discovered_at": "2026-10-03T00:47:09.000Z" }, { "id": 150151, "urlhaus_id": "3927239", "url": "http://115.63.83.136:59187/i", "host": "115.63.83.136", "host_ip": "115.63.83.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 00:31:19 UTC", "discovered_at": "2026-10-03T00:31:19.000Z" }, { "id": 150153, "urlhaus_id": "3927238", "url": "http://115.50.36.197:55637/bin.sh", "host": "115.50.36.197", "host_ip": "115.50.36.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 00:31:18 UTC", "discovered_at": "2026-10-03T00:31:18.000Z" }, { "id": 150152, "urlhaus_id": "3927237", "url": "http://59.96.137.180:46176/bin.sh", "host": "59.96.137.180", "host_ip": "59.96.137.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 00:31:18 UTC", "discovered_at": "2026-10-03T00:31:18.000Z" }, { "id": 150155, "urlhaus_id": "3927236", "url": "http://103.190.23.91:45769/bin.sh", "host": "103.190.23.91", "host_ip": "103.190.23.91", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 00:17:14 UTC", "discovered_at": "2026-10-03T00:17:14.000Z" }, { "id": 150154, "urlhaus_id": "3927235", "url": "http://42.57.54.188:57326/i", "host": "42.57.54.188", "host_ip": "42.57.54.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 00:17:14 UTC", "discovered_at": "2026-10-03T00:17:14.000Z" }, { "id": 150156, "urlhaus_id": "3927234", "url": "http://60.23.238.222:46034/bin.sh", "host": "60.23.238.222", "host_ip": "60.23.238.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 00:02:26 UTC", "discovered_at": "2026-10-03T00:02:26.000Z" }, { "id": 150161, "urlhaus_id": "3927233", "url": "http://42.231.251.2:39954/i", "host": "42.231.251.2", "host_ip": "42.231.251.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 00:02:14 UTC", "discovered_at": "2026-10-03T00:02:14.000Z" }, { "id": 150160, "urlhaus_id": "3927232", "url": "http://36.24.43.54:52435/i", "host": "36.24.43.54", "host_ip": "36.24.43.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 00:02:14 UTC", "discovered_at": "2026-10-03T00:02:14.000Z" }, { "id": 150159, "urlhaus_id": "3927231", "url": "http://27.28.99.89:57238/bin.sh", "host": "27.28.99.89", "host_ip": "27.28.99.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 00:02:14 UTC", "discovered_at": "2026-10-03T00:02:14.000Z" }, { "id": 150158, "urlhaus_id": "3927230", "url": "http://120.28.76.69:54395/i", "host": "120.28.76.69", "host_ip": "120.28.76.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-03 00:02:14 UTC", "discovered_at": "2026-10-03T00:02:14.000Z" }, { "id": 150157, "urlhaus_id": "3927229", "url": "http://60.23.238.222:46034/i", "host": "60.23.238.222", "host_ip": "60.23.238.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-03 00:02:14 UTC", "discovered_at": "2026-10-03T00:02:14.000Z" }, { "id": 150162, "urlhaus_id": "3927228", "url": "http://61.53.105.219:58999/i", "host": "61.53.105.219", "host_ip": "61.53.105.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-03 00:02:13 UTC", "discovered_at": "2026-10-03T00:02:13.000Z" }, { "id": 150163, "urlhaus_id": "3927227", "url": "http://61.53.85.131:35555/bin.sh", "host": "61.53.85.131", "host_ip": "61.53.85.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 23:56:17 UTC", "discovered_at": "2026-10-02T23:56:17.000Z" }, { "id": 150164, "urlhaus_id": "3927226", "url": "https://nfadealer.top/download?payload=njRat.exe", "host": "nfadealer.top", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-02 23:54:20 UTC", "discovered_at": "2026-10-02T23:54:20.000Z" }, { "id": 150165, "urlhaus_id": "3927225", "url": "http://221.15.90.114:58573/i", "host": "221.15.90.114", "host_ip": "221.15.90.114", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:47:27 UTC", "discovered_at": "2026-10-02T23:47:27.000Z" }, { "id": 150166, "urlhaus_id": "3927224", "url": "http://196.191.104.3:59963/i", "host": "196.191.104.3", "host_ip": "196.191.104.3", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 23:47:26 UTC", "discovered_at": "2026-10-02T23:47:26.000Z" }, { "id": 150167, "urlhaus_id": "3927223", "url": "http://60.18.101.68:45478/i", "host": "60.18.101.68", "host_ip": "60.18.101.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 23:47:17 UTC", "discovered_at": "2026-10-02T23:47:17.000Z" }, { "id": 150171, "urlhaus_id": "3927222", "url": "http://221.14.37.255:37089/bin.sh", "host": "221.14.37.255", "host_ip": "221.14.37.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:47:15 UTC", "discovered_at": "2026-10-02T23:47:15.000Z" }, { "id": 150170, "urlhaus_id": "3927221", "url": "http://61.53.105.219:58999/bin.sh", "host": "61.53.105.219", "host_ip": "61.53.105.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:47:15 UTC", "discovered_at": "2026-10-02T23:47:15.000Z" }, { "id": 150169, "urlhaus_id": "3927220", "url": "http://42.57.54.188:57326/bin.sh", "host": "42.57.54.188", "host_ip": "42.57.54.188", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 23:47:15 UTC", "discovered_at": "2026-10-02T23:47:15.000Z" }, { "id": 150168, "urlhaus_id": "3927219", "url": "http://177.36.24.217:53390/i", "host": "177.36.24.217", "host_ip": "177.36.24.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 23:47:15 UTC", "discovered_at": "2026-10-02T23:47:15.000Z" }, { "id": 150172, "urlhaus_id": "3927218", "url": "http://115.48.148.67:52424/i", "host": "115.48.148.67", "host_ip": "115.48.148.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 23:41:26 UTC", "discovered_at": "2026-10-02T23:41:26.000Z" }, { "id": 150173, "urlhaus_id": "3927217", "url": "http://170.254.10.219:57000/bin.sh", "host": "170.254.10.219", "host_ip": "170.254.10.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 23:34:19 UTC", "discovered_at": "2026-10-02T23:34:19.000Z" }, { "id": 150176, "urlhaus_id": "3927216", "url": "http://125.47.203.127:41326/i", "host": "125.47.203.127", "host_ip": "125.47.203.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 23:31:19 UTC", "discovered_at": "2026-10-02T23:31:19.000Z" }, { "id": 150175, "urlhaus_id": "3927215", "url": "http://123.14.50.106:57586/i", "host": "123.14.50.106", "host_ip": "123.14.50.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:31:19 UTC", "discovered_at": "2026-10-02T23:31:19.000Z" }, { "id": 150174, "urlhaus_id": "3927214", "url": "http://222.246.108.138:44574/i", "host": "222.246.108.138", "host_ip": "222.246.108.138", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 23:31:19 UTC", "discovered_at": "2026-10-02T23:31:19.000Z" }, { "id": 150180, "urlhaus_id": "3927213", "url": "http://112.248.1.178:55891/i", "host": "112.248.1.178", "host_ip": "112.248.1.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:31:18 UTC", "discovered_at": "2026-10-02T23:31:18.000Z" }, { "id": 150179, "urlhaus_id": "3927212", "url": "http://39.74.80.74:36750/i", "host": "39.74.80.74", "host_ip": "39.74.80.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:31:18 UTC", "discovered_at": "2026-10-02T23:31:18.000Z" }, { "id": 150178, "urlhaus_id": "3927211", "url": "http://196.189.35.172:51121/i", "host": "196.189.35.172", "host_ip": "196.189.35.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 23:31:18 UTC", "discovered_at": "2026-10-02T23:31:18.000Z" }, { "id": 150177, "urlhaus_id": "3927210", "url": "http://83.219.1.198:41399/bin.sh", "host": "83.219.1.198", "host_ip": "83.219.1.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:31:18 UTC", "discovered_at": "2026-10-02T23:31:18.000Z" }, { "id": 150181, "urlhaus_id": "3927209", "url": "http://182.119.51.115:56538/bin.sh", "host": "182.119.51.115", "host_ip": "182.119.51.115", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 23:23:26 UTC", "discovered_at": "2026-10-02T23:23:26.000Z" }, { "id": 150182, "urlhaus_id": "3927208", "url": "http://112.248.1.178:55891/bin.sh", "host": "112.248.1.178", "host_ip": "112.248.1.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:17:33 UTC", "discovered_at": "2026-10-02T23:17:33.000Z" }, { "id": 150183, "urlhaus_id": "3927207", "url": "http://182.127.191.193:47203/i", "host": "182.127.191.193", "host_ip": "182.127.191.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:17:28 UTC", "discovered_at": "2026-10-02T23:17:28.000Z" }, { "id": 150185, "urlhaus_id": "3927206", "url": "http://117.211.213.219:40721/i", "host": "117.211.213.219", "host_ip": "117.211.213.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:17:14 UTC", "discovered_at": "2026-10-02T23:17:14.000Z" }, { "id": 150184, "urlhaus_id": "3927205", "url": "http://27.217.248.166:50836/i", "host": "27.217.248.166", "host_ip": "27.217.248.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:17:14 UTC", "discovered_at": "2026-10-02T23:17:14.000Z" }, { "id": 150186, "urlhaus_id": "3927204", "url": "http://115.57.252.5:47288/bin.sh", "host": "115.57.252.5", "host_ip": "115.57.252.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 23:07:33 UTC", "discovered_at": "2026-10-02T23:07:33.000Z" }, { "id": 150187, "urlhaus_id": "3927203", "url": "http://115.54.150.106:57804/i", "host": "115.54.150.106", "host_ip": "115.54.150.106", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:02:13 UTC", "discovered_at": "2026-10-02T23:02:13.000Z" }, { "id": 150190, "urlhaus_id": "3927202", "url": "http://39.74.80.74:36750/bin.sh", "host": "39.74.80.74", "host_ip": "39.74.80.74", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:02:12 UTC", "discovered_at": "2026-10-02T23:02:12.000Z" }, { "id": 150189, "urlhaus_id": "3927201", "url": "http://182.121.217.80:42289/bin.sh", "host": "182.121.217.80", "host_ip": "182.121.217.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 23:02:12 UTC", "discovered_at": "2026-10-02T23:02:12.000Z" }, { "id": 150188, "urlhaus_id": "3927200", "url": "http://196.189.35.172:51121/bin.sh", "host": "196.189.35.172", "host_ip": "196.189.35.172", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 23:02:12 UTC", "discovered_at": "2026-10-02T23:02:12.000Z" }, { "id": 150191, "urlhaus_id": "3927199", "url": "http://202.107.98.237:54547/i", "host": "202.107.98.237", "host_ip": "202.107.98.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:47:15 UTC", "discovered_at": "2026-10-02T22:47:15.000Z" }, { "id": 150193, "urlhaus_id": "3927198", "url": "http://151.232.139.186:46040/i", "host": "151.232.139.186", "host_ip": "151.232.139.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:47:14 UTC", "discovered_at": "2026-10-02T22:47:14.000Z" }, { "id": 150192, "urlhaus_id": "3927197", "url": "http://182.240.53.158:44040/i", "host": "182.240.53.158", "host_ip": "182.240.53.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 22:47:14 UTC", "discovered_at": "2026-10-02T22:47:14.000Z" }, { "id": 150194, "urlhaus_id": "3927196", "url": "http://113.236.70.177:42662/i", "host": "113.236.70.177", "host_ip": "113.236.70.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:47:13 UTC", "discovered_at": "2026-10-02T22:47:13.000Z" }, { "id": 150195, "urlhaus_id": "3927195", "url": "http://219.155.202.2:47250/bin.sh", "host": "219.155.202.2", "host_ip": "219.155.202.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 22:39:26 UTC", "discovered_at": "2026-10-02T22:39:26.000Z" }, { "id": 150196, "urlhaus_id": "3927194", "url": "http://121.231.117.51:34841/i", "host": "121.231.117.51", "host_ip": "121.231.117.51", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 22:32:14 UTC", "discovered_at": "2026-10-02T22:32:14.000Z" }, { "id": 150198, "urlhaus_id": "3927193", "url": "http://125.40.49.75:45103/bin.sh", "host": "125.40.49.75", "host_ip": "125.40.49.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:32:13 UTC", "discovered_at": "2026-10-02T22:32:13.000Z" }, { "id": 150197, "urlhaus_id": "3927192", "url": "http://175.165.83.134:48152/i", "host": "175.165.83.134", "host_ip": "175.165.83.134", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:32:13 UTC", "discovered_at": "2026-10-02T22:32:13.000Z" }, { "id": 150199, "urlhaus_id": "3927191", "url": "http://182.240.53.158:44040/bin.sh", "host": "182.240.53.158", "host_ip": "182.240.53.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 22:31:32 UTC", "discovered_at": "2026-10-02T22:31:32.000Z" }, { "id": 150200, "urlhaus_id": "3927190", "url": "http://182.113.233.233:42688/bin.sh", "host": "182.113.233.233", "host_ip": "182.113.233.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:31:16 UTC", "discovered_at": "2026-10-02T22:31:16.000Z" }, { "id": 150202, "urlhaus_id": "3927189", "url": "http://175.151.218.17:33901/i", "host": "175.151.218.17", "host_ip": "175.151.218.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:31:15 UTC", "discovered_at": "2026-10-02T22:31:15.000Z" }, { "id": 150201, "urlhaus_id": "3927188", "url": "http://182.113.40.245:38525/i", "host": "182.113.40.245", "host_ip": "182.113.40.245", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:31:15 UTC", "discovered_at": "2026-10-02T22:31:15.000Z" }, { "id": 150203, "urlhaus_id": "3927187", "url": "http://193.178.158.57/bin/67dbf1a8e19934e4_thread_hijacking_cayOy4NB.exe", "host": "193.178.158.57", "host_ip": "193.178.158.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, donutloader, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-02 22:18:13 UTC", "discovered_at": "2026-10-02T22:18:13.000Z" }, { "id": 150204, "urlhaus_id": "3927186", "url": "http://222.139.45.127:43346/i", "host": "222.139.45.127", "host_ip": "222.139.45.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 22:17:19 UTC", "discovered_at": "2026-10-02T22:17:19.000Z" }, { "id": 150206, "urlhaus_id": "3927185", "url": "http://151.232.139.186:46040/bin.sh", "host": "151.232.139.186", "host_ip": "151.232.139.186", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:17:14 UTC", "discovered_at": "2026-10-02T22:17:14.000Z" }, { "id": 150205, "urlhaus_id": "3927184", "url": "http://113.236.70.177:42662/bin.sh", "host": "113.236.70.177", "host_ip": "113.236.70.177", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:17:14 UTC", "discovered_at": "2026-10-02T22:17:14.000Z" }, { "id": 150207, "urlhaus_id": "3927183", "url": "http://175.151.218.17:33901/bin.sh", "host": "175.151.218.17", "host_ip": "175.151.218.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:02:24 UTC", "discovered_at": "2026-10-02T22:02:24.000Z" }, { "id": 150208, "urlhaus_id": "3927182", "url": "http://182.113.40.245:38525/bin.sh", "host": "182.113.40.245", "host_ip": "182.113.40.245", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:02:16 UTC", "discovered_at": "2026-10-02T22:02:16.000Z" }, { "id": 150210, "urlhaus_id": "3927181", "url": "http://42.234.235.143:48587/i", "host": "42.234.235.143", "host_ip": "42.234.235.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:02:14 UTC", "discovered_at": "2026-10-02T22:02:14.000Z" }, { "id": 150209, "urlhaus_id": "3927180", "url": "http://115.53.222.166:35076/bin.sh", "host": "115.53.222.166", "host_ip": "115.53.222.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:02:14 UTC", "discovered_at": "2026-10-02T22:02:14.000Z" }, { "id": 150211, "urlhaus_id": "3927179", "url": "http://221.13.232.196:34024/i", "host": "221.13.232.196", "host_ip": "221.13.232.196", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:01:15 UTC", "discovered_at": "2026-10-02T22:01:15.000Z" }, { "id": 150213, "urlhaus_id": "3927178", "url": "http://175.148.158.11:35329/i", "host": "175.148.158.11", "host_ip": "175.148.158.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 22:01:14 UTC", "discovered_at": "2026-10-02T22:01:14.000Z" }, { "id": 150212, "urlhaus_id": "3927177", "url": "http://61.54.234.57:57183/i", "host": "61.54.234.57", "host_ip": "61.54.234.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 22:01:14 UTC", "discovered_at": "2026-10-02T22:01:14.000Z" }, { "id": 150215, "urlhaus_id": "3927176", "url": "http://115.57.183.7:47813/bin.sh", "host": "115.57.183.7", "host_ip": "115.57.183.7", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 21:47:12 UTC", "discovered_at": "2026-10-02T21:47:12.000Z" }, { "id": 150214, "urlhaus_id": "3927175", "url": "http://175.148.158.11:35329/bin.sh", "host": "175.148.158.11", "host_ip": "175.148.158.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 21:47:12 UTC", "discovered_at": "2026-10-02T21:47:12.000Z" }, { "id": 150217, "urlhaus_id": "3927174", "url": "http://42.6.60.72:56795/i", "host": "42.6.60.72", "host_ip": "42.6.60.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 21:47:11 UTC", "discovered_at": "2026-10-02T21:47:11.000Z" }, { "id": 150216, "urlhaus_id": "3927173", "url": "http://115.48.162.176:35189/bin.sh", "host": "115.48.162.176", "host_ip": "115.48.162.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 21:47:11 UTC", "discovered_at": "2026-10-02T21:47:11.000Z" }, { "id": 150218, "urlhaus_id": "3927172", "url": "http://117.190.134.251:53823/bin.sh", "host": "117.190.134.251", "host_ip": "117.190.134.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 21:44:27 UTC", "discovered_at": "2026-10-02T21:44:27.000Z" }, { "id": 150219, "urlhaus_id": "3927171", "url": "http://115.53.222.166:35076/i", "host": "115.53.222.166", "host_ip": "115.53.222.166", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 21:32:17 UTC", "discovered_at": "2026-10-02T21:32:17.000Z" }, { "id": 150220, "urlhaus_id": "3927170", "url": "http://113.230.235.85:33943/i", "host": "113.230.235.85", "host_ip": "113.230.235.85", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 21:32:15 UTC", "discovered_at": "2026-10-02T21:32:15.000Z" }, { "id": 150221, "urlhaus_id": "3927169", "url": "http://175.148.154.114:57967/i", "host": "175.148.154.114", "host_ip": "175.148.154.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 21:32:14 UTC", "discovered_at": "2026-10-02T21:32:14.000Z" }, { "id": 150222, "urlhaus_id": "3927168", "url": "http://217.145.72.196/arm", "host": "217.145.72.196", "host_ip": "217.145.72.196", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-02 21:23:24 UTC", "discovered_at": "2026-10-02T21:23:24.000Z" }, { "id": 150223, "urlhaus_id": "3927167", "url": "http://176.65.139.78/eclipse.sparc", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-02 21:23:09 UTC", "discovered_at": "2026-10-02T21:23:09.000Z" }, { "id": 150224, "urlhaus_id": "3927166", "url": "http://176.65.139.78/eclipse.aarch64", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-02 21:22:14 UTC", "discovered_at": "2026-10-02T21:22:14.000Z" }, { "id": 150225, "urlhaus_id": "3927165", "url": "http://115.49.20.207:38643/i", "host": "115.49.20.207", "host_ip": "115.49.20.207", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 21:21:30 UTC", "discovered_at": "2026-10-02T21:21:30.000Z" }, { "id": 150226, "urlhaus_id": "3927164", "url": "http://115.61.47.213:60869/i", "host": "115.61.47.213", "host_ip": "115.61.47.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 21:17:19 UTC", "discovered_at": "2026-10-02T21:17:19.000Z" }, { "id": 150228, "urlhaus_id": "3927163", "url": "http://222.127.49.242:37677/i", "host": "222.127.49.242", "host_ip": "222.127.49.242", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 21:17:11 UTC", "discovered_at": "2026-10-02T21:17:11.000Z" }, { "id": 150227, "urlhaus_id": "3927162", "url": "http://182.127.69.67:46810/bin.sh", "host": "182.127.69.67", "host_ip": "182.127.69.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 21:17:11 UTC", "discovered_at": "2026-10-02T21:17:11.000Z" }, { "id": 150231, "urlhaus_id": "3927161", "url": "http://42.226.78.24:59512/i", "host": "42.226.78.24", "host_ip": "42.226.78.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 21:02:15 UTC", "discovered_at": "2026-10-02T21:02:15.000Z" }, { "id": 150230, "urlhaus_id": "3927160", "url": "http://175.148.154.114:57967/bin.sh", "host": "175.148.154.114", "host_ip": "175.148.154.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 21:02:15 UTC", "discovered_at": "2026-10-02T21:02:15.000Z" }, { "id": 150229, "urlhaus_id": "3927159", "url": "http://105.186.99.138:47309/i", "host": "105.186.99.138", "host_ip": "105.186.99.138", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 21:02:15 UTC", "discovered_at": "2026-10-02T21:02:15.000Z" }, { "id": 150235, "urlhaus_id": "3927158", "url": "http://27.206.184.220:55514/bin.sh", "host": "27.206.184.220", "host_ip": "27.206.184.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 21:02:14 UTC", "discovered_at": "2026-10-02T21:02:14.000Z" }, { "id": 150234, "urlhaus_id": "3927157", "url": "http://103.111.23.11:53731/i", "host": "103.111.23.11", "host_ip": "103.111.23.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 21:02:14 UTC", "discovered_at": "2026-10-02T21:02:14.000Z" }, { "id": 150233, "urlhaus_id": "3927156", "url": "http://182.121.152.52:52165/i", "host": "182.121.152.52", "host_ip": "182.121.152.52", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 21:02:14 UTC", "discovered_at": "2026-10-02T21:02:14.000Z" }, { "id": 150232, "urlhaus_id": "3927155", "url": "http://177.36.24.217:53390/bin.sh", "host": "177.36.24.217", "host_ip": "177.36.24.217", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 21:02:14 UTC", "discovered_at": "2026-10-02T21:02:14.000Z" }, { "id": 150236, "urlhaus_id": "3927154", "url": "http://123.14.58.117:38572/i", "host": "123.14.58.117", "host_ip": "123.14.58.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 20:57:25 UTC", "discovered_at": "2026-10-02T20:57:25.000Z" }, { "id": 150237, "urlhaus_id": "3927153", "url": "https://cdn.discordapp.com/attachments/1555672813413732352/1555673509751951361/bundle.zip?ex=6ac1615b&is=6ac00fdb&hm=7fa01976e030509c4017d9478904258c81d5c0e0aadee2e32b2df9c7cfa81d1f&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-02 20:46:37 UTC", "discovered_at": "2026-10-02T20:46:37.000Z" }, { "id": 150238, "urlhaus_id": "3927152", "url": "http://196.189.198.173:51863/i", "host": "196.189.198.173", "host_ip": "196.189.198.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 20:46:32 UTC", "discovered_at": "2026-10-02T20:46:32.000Z" }, { "id": 150241, "urlhaus_id": "3927151", "url": "http://31.56.209.73:65161/s/kal64", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "BillGates, elf, ssh", "last_online": null, "first_seen": "2026-10-02 20:46:26 UTC", "discovered_at": "2026-10-02T20:46:26.000Z" }, { "id": 150240, "urlhaus_id": "3927150", "url": "http://31.56.209.73:65161/s/amd64", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ssh", "last_online": null, "first_seen": "2026-10-02 20:46:26 UTC", "discovered_at": "2026-10-02T20:46:26.000Z" }, { "id": 150239, "urlhaus_id": "3927149", "url": "http://31.56.209.73:65161/s/kswpad", "host": "31.56.209.73", "host_ip": "31.56.209.73", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "BillGates, elf, ssh", "last_online": null, "first_seen": "2026-10-02 20:46:26 UTC", "discovered_at": "2026-10-02T20:46:26.000Z" }, { "id": 150242, "urlhaus_id": "3927148", "url": "http://60.19.209.10:51270/i", "host": "60.19.209.10", "host_ip": "60.19.209.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 20:46:20 UTC", "discovered_at": "2026-10-02T20:46:20.000Z" }, { "id": 150245, "urlhaus_id": "3927147", "url": "http://91.92.242.236/files-129312398/files/file_d3e9763172c39cfb.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-02 20:46:18 UTC", "discovered_at": "2026-10-02T20:46:18.000Z" }, { "id": 150244, "urlhaus_id": "3927146", "url": "http://117.190.134.251:53823/i", "host": "117.190.134.251", "host_ip": "117.190.134.251", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 20:46:18 UTC", "discovered_at": "2026-10-02T20:46:18.000Z" }, { "id": 150243, "urlhaus_id": "3927145", "url": "http://42.226.64.166:51342/i", "host": "42.226.64.166", "host_ip": "42.226.64.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 20:46:18 UTC", "discovered_at": "2026-10-02T20:46:18.000Z" }, { "id": 150248, "urlhaus_id": "3927144", "url": "http://109.238.87.111/d/unix37077334", "host": "109.238.87.111", "host_ip": "109.238.87.111", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 20:46:17 UTC", "discovered_at": "2026-10-02T20:46:17.000Z" }, { "id": 150247, "urlhaus_id": "3927143", "url": "https://tetris-supdate.xyz/d/unix58962202", "host": "tetris-supdate.xyz", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 20:46:17 UTC", "discovered_at": "2026-10-02T20:46:17.000Z" }, { "id": 150246, "urlhaus_id": "3927142", "url": "http://170.254.10.219:57000/i", "host": "170.254.10.219", "host_ip": "170.254.10.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 20:46:17 UTC", "discovered_at": "2026-10-02T20:46:17.000Z" }, { "id": 150249, "urlhaus_id": "3927141", "url": "http://39.80.60.21:38015/Mozi.m", "host": "39.80.60.21", "host_ip": "39.80.60.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 20:46:16 UTC", "discovered_at": "2026-10-02T20:46:16.000Z" }, { "id": 150250, "urlhaus_id": "3927140", "url": "http://91.92.242.236/files-129312398/files/file_18b51ad133197bb3.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-02 20:46:14 UTC", "discovered_at": "2026-10-02T20:46:14.000Z" }, { "id": 150252, "urlhaus_id": "3927139", "url": "http://176.65.139.160/cnc.pre-raw-apk", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:26 UTC", "discovered_at": "2026-10-02T20:45:26.000Z" }, { "id": 150251, "urlhaus_id": "3927138", "url": "http://176.65.139.160/xmrig-x86", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, CoinMiner, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:26 UTC", "discovered_at": "2026-10-02T20:45:26.000Z" }, { "id": 150255, "urlhaus_id": "3927137", "url": "http://94.154.43.203:8090/cur.sh", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:25 UTC", "discovered_at": "2026-10-02T20:45:25.000Z" }, { "id": 150254, "urlhaus_id": "3927136", "url": "http://176.65.139.160/xmrig-x64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, CoinMiner, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:25 UTC", "discovered_at": "2026-10-02T20:45:25.000Z" }, { "id": 150253, "urlhaus_id": "3927135", "url": "http://176.65.139.160/xmrig-aarch64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, CoinMiner, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:25 UTC", "discovered_at": "2026-10-02T20:45:25.000Z" }, { "id": 150256, "urlhaus_id": "3927134", "url": "http://176.65.139.160/cnc.pre-category", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:21 UTC", "discovered_at": "2026-10-02T20:45:21.000Z" }, { "id": 150258, "urlhaus_id": "3927133", "url": "http://176.65.139.160/cnc.backup-ui", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:20 UTC", "discovered_at": "2026-10-02T20:45:20.000Z" }, { "id": 150257, "urlhaus_id": "3927132", "url": "http://176.65.139.160/xmrig-arm", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, CoinMiner, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:20 UTC", "discovered_at": "2026-10-02T20:45:20.000Z" }, { "id": 150260, "urlhaus_id": "3927131", "url": "http://176.65.139.160/pid.ppc64le", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:19 UTC", "discovered_at": "2026-10-02T20:45:19.000Z" }, { "id": 150259, "urlhaus_id": "3927130", "url": "http://176.65.139.160/l4_armv7l", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:19 UTC", "discovered_at": "2026-10-02T20:45:19.000Z" }, { "id": 150261, "urlhaus_id": "3927129", "url": "https://github.com/thuhangn562727-del/maqueo/raw/refs/heads/main/mko1.exe", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, exe, rat", "last_online": null, "first_seen": "2026-10-02 20:45:16 UTC", "discovered_at": "2026-10-02T20:45:16.000Z" }, { "id": 150262, "urlhaus_id": "3927128", "url": "https://raw.githubusercontent.com/thuhangn562727-del/maqueo/refs/heads/main/mko1.js?download=1", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsyncRAT, js", "last_online": null, "first_seen": "2026-10-02 20:45:14 UTC", "discovered_at": "2026-10-02T20:45:14.000Z" }, { "id": 150263, "urlhaus_id": "3927127", "url": "http://176.65.139.160/juan.apk", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:45:13 UTC", "discovered_at": "2026-10-02T20:45:13.000Z" }, { "id": 150265, "urlhaus_id": "3927126", "url": "http://176.65.139.160/armv7l.pre-persist", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:44:26 UTC", "discovered_at": "2026-10-02T20:44:26.000Z" }, { "id": 150264, "urlhaus_id": "3927125", "url": "http://176.65.139.160/pid.armv6l", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:44:26 UTC", "discovered_at": "2026-10-02T20:44:26.000Z" }, { "id": 150268, "urlhaus_id": "3927124", "url": "http://176.65.139.160/armv7l.pre-variant", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:44:23 UTC", "discovered_at": "2026-10-02T20:44:23.000Z" }, { "id": 150267, "urlhaus_id": "3927123", "url": "http://176.65.139.160/aarch64.pre-persist", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:44:23 UTC", "discovered_at": "2026-10-02T20:44:23.000Z" }, { "id": 150266, "urlhaus_id": "3927122", "url": "http://176.65.139.160/aarch64.pre-variant", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:44:23 UTC", "discovered_at": "2026-10-02T20:44:23.000Z" }, { "id": 150270, "urlhaus_id": "3927121", "url": "http://176.65.139.160/pid.armv7l", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:44:22 UTC", "discovered_at": "2026-10-02T20:44:22.000Z" }, { "id": 150269, "urlhaus_id": "3927120", "url": "http://176.65.139.160/pid.armv5tel", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:44:22 UTC", "discovered_at": "2026-10-02T20:44:22.000Z" }, { "id": 150271, "urlhaus_id": "3927119", "url": "http://31.76.61.78/t/stg.lnk", "host": "31.76.61.78", "host_ip": "31.76.61.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "31-76-61-78, lnk, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:42:11 UTC", "discovered_at": "2026-10-02T20:42:11.000Z" }, { "id": 150272, "urlhaus_id": "3927118", "url": "http://31.76.61.78/t/reader.hta", "host": "31.76.61.78", "host_ip": "31.76.61.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "31-76-61-78, hta, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:41:13 UTC", "discovered_at": "2026-10-02T20:41:13.000Z" }, { "id": 150273, "urlhaus_id": "3927117", "url": "http://101.59.79.119:43520/bin.sh", "host": "101.59.79.119", "host_ip": "101.59.79.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 20:40:23 UTC", "discovered_at": "2026-10-02T20:40:23.000Z" }, { "id": 150274, "urlhaus_id": "3927116", "url": "http://123.14.58.117:38572/bin.sh", "host": "123.14.58.117", "host_ip": "123.14.58.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 20:35:13 UTC", "discovered_at": "2026-10-02T20:35:13.000Z" }, { "id": 150277, "urlhaus_id": "3927115", "url": "http://115.57.199.235:49961/i", "host": "115.57.199.235", "host_ip": "115.57.199.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 20:32:17 UTC", "discovered_at": "2026-10-02T20:32:17.000Z" }, { "id": 150276, "urlhaus_id": "3927114", "url": "http://220.161.160.97:56313/i", "host": "220.161.160.97", "host_ip": "220.161.160.97", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 20:32:17 UTC", "discovered_at": "2026-10-02T20:32:17.000Z" }, { "id": 150275, "urlhaus_id": "3927113", "url": "http://115.55.54.132:41453/i", "host": "115.55.54.132", "host_ip": "115.55.54.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 20:32:17 UTC", "discovered_at": "2026-10-02T20:32:17.000Z" }, { "id": 150278, "urlhaus_id": "3927112", "url": "http://77.79.160.210:35699/i", "host": "77.79.160.210", "host_ip": "77.79.160.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 20:32:15 UTC", "discovered_at": "2026-10-02T20:32:15.000Z" }, { "id": 150280, "urlhaus_id": "3927111", "url": "http://217.60.195.187/b_wt", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:29:22 UTC", "discovered_at": "2026-10-02T20:29:22.000Z" }, { "id": 150279, "urlhaus_id": "3927110", "url": "http://217.60.195.187/x86_64_nl", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:29:22 UTC", "discovered_at": "2026-10-02T20:29:22.000Z" }, { "id": 150285, "urlhaus_id": "3927109", "url": "http://217.60.195.187/x86_64_fin", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:26 UTC", "discovered_at": "2026-10-02T20:28:26.000Z" }, { "id": 150284, "urlhaus_id": "3927108", "url": "http://217.60.195.187/b_kt", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:26 UTC", "discovered_at": "2026-10-02T20:28:26.000Z" }, { "id": 150283, "urlhaus_id": "3927107", "url": "http://217.60.195.187/x86_64_dbg", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:26 UTC", "discovered_at": "2026-10-02T20:28:26.000Z" }, { "id": 150282, "urlhaus_id": "3927106", "url": "http://217.60.195.187/x86_64_nowd", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:26 UTC", "discovered_at": "2026-10-02T20:28:26.000Z" }, { "id": 150281, "urlhaus_id": "3927105", "url": "http://217.60.195.187/b_persist", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:26 UTC", "discovered_at": "2026-10-02T20:28:26.000Z" }, { "id": 150288, "urlhaus_id": "3927104", "url": "http://217.60.195.187/x86_64_nsr", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:25 UTC", "discovered_at": "2026-10-02T20:28:25.000Z" }, { "id": 150287, "urlhaus_id": "3927103", "url": "http://217.60.195.187/x86_64_v2", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:25 UTC", "discovered_at": "2026-10-02T20:28:25.000Z" }, { "id": 150286, "urlhaus_id": "3927102", "url": "http://217.60.195.187/x86_64_sr", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:25 UTC", "discovered_at": "2026-10-02T20:28:25.000Z" }, { "id": 150290, "urlhaus_id": "3927101", "url": "http://217.60.195.187/x86_64_new", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:16 UTC", "discovered_at": "2026-10-02T20:28:16.000Z" }, { "id": 150289, "urlhaus_id": "3927100", "url": "http://217.60.195.187/x86_64_ns", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:16 UTC", "discovered_at": "2026-10-02T20:28:16.000Z" }, { "id": 150293, "urlhaus_id": "3927099", "url": "http://217.60.195.187/b_lt", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:15 UTC", "discovered_at": "2026-10-02T20:28:15.000Z" }, { "id": 150292, "urlhaus_id": "3927098", "url": "http://217.60.195.187/x86_64_t8", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:15 UTC", "discovered_at": "2026-10-02T20:28:15.000Z" }, { "id": 150291, "urlhaus_id": "3927097", "url": "http://217.60.195.187/x86_64_clean", "host": "217.60.195.187", "host_ip": "217.60.195.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "217-60-195-187, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:28:15 UTC", "discovered_at": "2026-10-02T20:28:15.000Z" }, { "id": 150294, "urlhaus_id": "3927096", "url": "http://175.149.91.64:38924/i", "host": "175.149.91.64", "host_ip": "175.149.91.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 20:25:44 UTC", "discovered_at": "2026-10-02T20:25:44.000Z" }, { "id": 150295, "urlhaus_id": "3927095", "url": "http://193.26.115.64/setup_Unassigned.msi", "host": "193.26.115.64", "host_ip": "193.26.115.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "193-26-115-64, AteraAgent, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:19:19 UTC", "discovered_at": "2026-10-02T20:19:19.000Z" }, { "id": 150296, "urlhaus_id": "3927094", "url": "http://178.16.52.209/agent.exe", "host": "178.16.52.209", "host_ip": "178.16.52.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "178-16-52-209, exe, ua-wget", "last_online": null, "first_seen": "2026-10-02 20:19:16 UTC", "discovered_at": "2026-10-02T20:19:16.000Z" }, { "id": 150297, "urlhaus_id": "3927093", "url": "http://160.179.255.198:45158/i", "host": "160.179.255.198", "host_ip": "160.179.255.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 20:16:18 UTC", "discovered_at": "2026-10-02T20:16:18.000Z" }, { "id": 150298, "urlhaus_id": "3927092", "url": "http://77.79.160.210:35699/bin.sh", "host": "77.79.160.210", "host_ip": "77.79.160.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 20:16:15 UTC", "discovered_at": "2026-10-02T20:16:15.000Z" }, { "id": 150299, "urlhaus_id": "3927091", "url": "http://112.242.231.62:59223/bin.sh", "host": "112.242.231.62", "host_ip": "112.242.231.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 20:03:12 UTC", "discovered_at": "2026-10-02T20:03:12.000Z" }, { "id": 150300, "urlhaus_id": "3927090", "url": "http://42.176.197.73:53327/bin.sh", "host": "42.176.197.73", "host_ip": "42.176.197.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 20:02:15 UTC", "discovered_at": "2026-10-02T20:02:15.000Z" }, { "id": 150301, "urlhaus_id": "3927089", "url": "http://36.69.66.206:40622/i", "host": "36.69.66.206", "host_ip": "36.69.66.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 20:01:18 UTC", "discovered_at": "2026-10-02T20:01:18.000Z" }, { "id": 150302, "urlhaus_id": "3927088", "url": "http://125.44.252.89:54690/bin.sh", "host": "125.44.252.89", "host_ip": "125.44.252.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 20:01:12 UTC", "discovered_at": "2026-10-02T20:01:12.000Z" }, { "id": 150303, "urlhaus_id": "3927087", "url": "http://175.149.91.64:38924/bin.sh", "host": "175.149.91.64", "host_ip": "175.149.91.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 19:58:40 UTC", "discovered_at": "2026-10-02T19:58:40.000Z" }, { "id": 150305, "urlhaus_id": "3927086", "url": "http://113.236.122.119:56180/i", "host": "113.236.122.119", "host_ip": "113.236.122.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 19:47:12 UTC", "discovered_at": "2026-10-02T19:47:12.000Z" }, { "id": 150304, "urlhaus_id": "3927085", "url": "http://103.125.31.101:37202/i", "host": "103.125.31.101", "host_ip": "103.125.31.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 19:47:12 UTC", "discovered_at": "2026-10-02T19:47:12.000Z" }, { "id": 150307, "urlhaus_id": "3927084", "url": "http://112.198.179.93:56538/i", "host": "112.198.179.93", "host_ip": "112.198.179.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 19:32:23 UTC", "discovered_at": "2026-10-02T19:32:23.000Z" }, { "id": 150306, "urlhaus_id": "3927083", "url": "http://180.191.20.148:49271/i", "host": "180.191.20.148", "host_ip": "180.191.20.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 19:32:23 UTC", "discovered_at": "2026-10-02T19:32:23.000Z" }, { "id": 150310, "urlhaus_id": "3927082", "url": "http://42.235.167.45:35993/i", "host": "42.235.167.45", "host_ip": "42.235.167.45", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 19:32:12 UTC", "discovered_at": "2026-10-02T19:32:12.000Z" }, { "id": 150309, "urlhaus_id": "3927081", "url": "http://178.74.91.108:3344/i", "host": "178.74.91.108", "host_ip": "178.74.91.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 19:32:12 UTC", "discovered_at": "2026-10-02T19:32:12.000Z" }, { "id": 150308, "urlhaus_id": "3927080", "url": "http://221.15.189.1:35189/i", "host": "221.15.189.1", "host_ip": "221.15.189.1", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 19:32:12 UTC", "discovered_at": "2026-10-02T19:32:12.000Z" }, { "id": 150311, "urlhaus_id": "3927079", "url": "http://222.141.2.255:39795/bin.sh", "host": "222.141.2.255", "host_ip": "222.141.2.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 19:32:11 UTC", "discovered_at": "2026-10-02T19:32:11.000Z" }, { "id": 150312, "urlhaus_id": "3927078", "url": "http://217.60.195.87/main_x86_64", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:27:24 UTC", "discovered_at": "2026-10-02T19:27:24.000Z" }, { "id": 150314, "urlhaus_id": "3927077", "url": "http://217.60.195.87/main_ppc", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:26:14 UTC", "discovered_at": "2026-10-02T19:26:14.000Z" }, { "id": 150313, "urlhaus_id": "3927076", "url": "http://217.60.195.87/main_sh4", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:26:14 UTC", "discovered_at": "2026-10-02T19:26:14.000Z" }, { "id": 150316, "urlhaus_id": "3927075", "url": "http://217.60.195.87/main_mpsl", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:25:19 UTC", "discovered_at": "2026-10-02T19:25:19.000Z" }, { "id": 150315, "urlhaus_id": "3927074", "url": "http://217.60.195.87/main_x86", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:25:19 UTC", "discovered_at": "2026-10-02T19:25:19.000Z" }, { "id": 150323, "urlhaus_id": "3927073", "url": "http://217.60.195.87/main_m68k", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:24:24 UTC", "discovered_at": "2026-10-02T19:24:24.000Z" }, { "id": 150322, "urlhaus_id": "3927072", "url": "http://217.60.195.87/main_arm", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:24:24 UTC", "discovered_at": "2026-10-02T19:24:24.000Z" }, { "id": 150321, "urlhaus_id": "3927071", "url": "http://217.60.195.87/main_arm6", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:24:24 UTC", "discovered_at": "2026-10-02T19:24:24.000Z" }, { "id": 150320, "urlhaus_id": "3927070", "url": "http://217.60.195.87/main_arm5", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:24:24 UTC", "discovered_at": "2026-10-02T19:24:24.000Z" }, { "id": 150319, "urlhaus_id": "3927069", "url": "http://217.60.195.87/main_mips", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:24:24 UTC", "discovered_at": "2026-10-02T19:24:24.000Z" }, { "id": 150318, "urlhaus_id": "3927068", "url": "http://176.65.139.201:8080/bot-linux-386", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-201-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:24:24 UTC", "discovered_at": "2026-10-02T19:24:24.000Z" }, { "id": 150317, "urlhaus_id": "3927067", "url": "http://217.60.195.87/main_arm7", "host": "217.60.195.87", "host_ip": "217.60.195.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-87, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:24:24 UTC", "discovered_at": "2026-10-02T19:24:24.000Z" }, { "id": 150324, "urlhaus_id": "3927066", "url": "http://185.137.62.72:16204/i", "host": "185.137.62.72", "host_ip": "185.137.62.72", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 19:17:15 UTC", "discovered_at": "2026-10-02T19:17:15.000Z" }, { "id": 150325, "urlhaus_id": "3927065", "url": "http://115.50.253.9:48225/bin.sh", "host": "115.50.253.9", "host_ip": "115.50.253.9", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 19:17:13 UTC", "discovered_at": "2026-10-02T19:17:13.000Z" }, { "id": 150327, "urlhaus_id": "3927064", "url": "http://158.94.208.124/Bin/ScreenConnect.ClientSetup.exe", "host": "158.94.208.124", "host_ip": "158.94.208.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "158-94-208-124, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:14:14 UTC", "discovered_at": "2026-10-02T19:14:14.000Z" }, { "id": 150326, "urlhaus_id": "3927063", "url": "http://158.94.208.124/bin/support.client.exe", "host": "158.94.208.124", "host_ip": "158.94.208.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "158-94-208-124, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:14:14 UTC", "discovered_at": "2026-10-02T19:14:14.000Z" }, { "id": 150328, "urlhaus_id": "3927062", "url": "http://203.159.90.39/a.sh", "host": "203.159.90.39", "host_ip": "203.159.90.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "203-159-90-39, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 19:14:11 UTC", "discovered_at": "2026-10-02T19:14:11.000Z" }, { "id": 150329, "urlhaus_id": "3927061", "url": "http://112.198.179.93:56538/bin.sh", "host": "112.198.179.93", "host_ip": "112.198.179.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 19:02:16 UTC", "discovered_at": "2026-10-02T19:02:16.000Z" }, { "id": 150330, "urlhaus_id": "3927060", "url": "http://219.155.230.253:54588/i", "host": "219.155.230.253", "host_ip": "219.155.230.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 19:02:13 UTC", "discovered_at": "2026-10-02T19:02:13.000Z" }, { "id": 150331, "urlhaus_id": "3927059", "url": "http://119.115.161.6:43861/i", "host": "119.115.161.6", "host_ip": "119.115.161.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 19:02:11 UTC", "discovered_at": "2026-10-02T19:02:11.000Z" }, { "id": 148465, "urlhaus_id": "3927058", "url": "http://60.23.235.214:54960/i", "host": "60.23.235.214", "host_ip": "60.23.235.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 18:59:25 UTC", "discovered_at": "2026-10-02T18:59:25.000Z" }, { "id": 148468, "urlhaus_id": "3927057", "url": "http://94.154.43.203:8080/xm/xmrig-static-x64", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-203-8080, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:59:23 UTC", "discovered_at": "2026-10-02T18:59:23.000Z" }, { "id": 148467, "urlhaus_id": "3927056", "url": "http://94.154.43.203:8080/xm/xmrig-static-arm64", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-203-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:59:23 UTC", "discovered_at": "2026-10-02T18:59:23.000Z" }, { "id": 148466, "urlhaus_id": "3927055", "url": "http://94.154.43.203:8080/xm/xmrig-static-armv7", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-203-8080, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:59:23 UTC", "discovered_at": "2026-10-02T18:59:23.000Z" }, { "id": 148471, "urlhaus_id": "3927054", "url": "http://94.154.43.203/dvr.sh", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-203, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:59:20 UTC", "discovered_at": "2026-10-02T18:59:20.000Z" }, { "id": 148470, "urlhaus_id": "3927053", "url": "http://94.154.43.203:8080/cur.sh", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-203-8080, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:59:20 UTC", "discovered_at": "2026-10-02T18:59:20.000Z" }, { "id": 148469, "urlhaus_id": "3927052", "url": "http://94.154.43.203/bins/kla.sh", "host": "94.154.43.203", "host_ip": "94.154.43.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-203, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:59:20 UTC", "discovered_at": "2026-10-02T18:59:20.000Z" }, { "id": 148472, "urlhaus_id": "3927051", "url": "http://91.92.242.236/files-129312398/files/file_838a0bfd231e7a20.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "54e64e, dropped-by-amadey, RemusStealer", "last_online": null, "first_seen": "2026-10-02 18:59:16 UTC", "discovered_at": "2026-10-02T18:59:16.000Z" }, { "id": 148473, "urlhaus_id": "3927050", "url": "http://36.70.98.162:38996/bin.sh", "host": "36.70.98.162", "host_ip": "36.70.98.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 18:48:22 UTC", "discovered_at": "2026-10-02T18:48:22.000Z" }, { "id": 148474, "urlhaus_id": "3927049", "url": "http://115.56.128.124:35336/i", "host": "115.56.128.124", "host_ip": "115.56.128.124", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:48:13 UTC", "discovered_at": "2026-10-02T18:48:13.000Z" }, { "id": 148475, "urlhaus_id": "3927048", "url": "http://42.7.118.219:44057/i", "host": "42.7.118.219", "host_ip": "42.7.118.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:47:29 UTC", "discovered_at": "2026-10-02T18:47:29.000Z" }, { "id": 148476, "urlhaus_id": "3927047", "url": "http://123.170.112.184:33140/i", "host": "123.170.112.184", "host_ip": "123.170.112.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:47:17 UTC", "discovered_at": "2026-10-02T18:47:17.000Z" }, { "id": 148478, "urlhaus_id": "3927046", "url": "http://175.150.147.4:33541/i", "host": "175.150.147.4", "host_ip": "175.150.147.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:47:16 UTC", "discovered_at": "2026-10-02T18:47:16.000Z" }, { "id": 148477, "urlhaus_id": "3927045", "url": "http://180.252.210.87:46043/i", "host": "180.252.210.87", "host_ip": "180.252.210.87", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:47:16 UTC", "discovered_at": "2026-10-02T18:47:16.000Z" }, { "id": 148488, "urlhaus_id": "3927044", "url": "http://176.65.139.239/iran.mipsel", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148487, "urlhaus_id": "3927043", "url": "http://176.65.139.239/iran.m68k", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148486, "urlhaus_id": "3927042", "url": "http://176.65.139.239/iran.armv5l", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148485, "urlhaus_id": "3927041", "url": "http://176.65.139.239/cat.sh", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148484, "urlhaus_id": "3927040", "url": "http://176.65.139.239/iran.armv4l", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148483, "urlhaus_id": "3927039", "url": "http://176.65.139.239/iran.armv7l", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148482, "urlhaus_id": "3927038", "url": "http://176.65.139.239/iran.x86_64", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148481, "urlhaus_id": "3927037", "url": "http://176.65.139.239/iran.sh4", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148480, "urlhaus_id": "3927036", "url": "http://176.65.139.239/iran.powerpc", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148479, "urlhaus_id": "3927035", "url": "http://176.65.139.239/iran.sparc", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:28 UTC", "discovered_at": "2026-10-02T18:46:28.000Z" }, { "id": 148494, "urlhaus_id": "3927034", "url": "http://176.65.139.239/iran.aarch64", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:16 UTC", "discovered_at": "2026-10-02T18:46:16.000Z" }, { "id": 148493, "urlhaus_id": "3927033", "url": "http://176.65.139.239/iran.mips", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:16 UTC", "discovered_at": "2026-10-02T18:46:16.000Z" }, { "id": 148492, "urlhaus_id": "3927032", "url": "http://176.65.139.239/iran.armv6l", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:16 UTC", "discovered_at": "2026-10-02T18:46:16.000Z" }, { "id": 148491, "urlhaus_id": "3927031", "url": "http://176.65.139.239/iran.i486", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:16 UTC", "discovered_at": "2026-10-02T18:46:16.000Z" }, { "id": 148490, "urlhaus_id": "3927030", "url": "http://176.65.139.239/iran.arc", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:16 UTC", "discovered_at": "2026-10-02T18:46:16.000Z" }, { "id": 148489, "urlhaus_id": "3927029", "url": "http://176.65.139.239/iran.mipsrouter", "host": "176.65.139.239", "host_ip": "176.65.139.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-239, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:46:16 UTC", "discovered_at": "2026-10-02T18:46:16.000Z" }, { "id": 148498, "urlhaus_id": "3927028", "url": "http://176.65.139.76/arm6", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:28 UTC", "discovered_at": "2026-10-02T18:44:28.000Z" }, { "id": 148497, "urlhaus_id": "3927027", "url": "http://176.65.139.76/x86", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:28 UTC", "discovered_at": "2026-10-02T18:44:28.000Z" }, { "id": 148496, "urlhaus_id": "3927026", "url": "http://176.65.139.76/mipsle", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:28 UTC", "discovered_at": "2026-10-02T18:44:28.000Z" }, { "id": 148495, "urlhaus_id": "3927025", "url": "http://176.65.139.76/arm", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:28 UTC", "discovered_at": "2026-10-02T18:44:28.000Z" }, { "id": 148499, "urlhaus_id": "3927024", "url": "http://176.65.139.76/arm64", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:26 UTC", "discovered_at": "2026-10-02T18:44:26.000Z" }, { "id": 148501, "urlhaus_id": "3927023", "url": "http://176.65.139.135/wget.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:24 UTC", "discovered_at": "2026-10-02T18:44:24.000Z" }, { "id": 148500, "urlhaus_id": "3927022", "url": "http://176.65.139.76/bins.sh", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:24 UTC", "discovered_at": "2026-10-02T18:44:24.000Z" }, { "id": 148504, "urlhaus_id": "3927021", "url": "http://176.65.139.76/mips", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:18 UTC", "discovered_at": "2026-10-02T18:44:18.000Z" }, { "id": 148503, "urlhaus_id": "3927020", "url": "http://176.65.139.76/amd64", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:18 UTC", "discovered_at": "2026-10-02T18:44:18.000Z" }, { "id": 148502, "urlhaus_id": "3927019", "url": "http://176.65.139.76/armv7l", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:18 UTC", "discovered_at": "2026-10-02T18:44:18.000Z" }, { "id": 148508, "urlhaus_id": "3927018", "url": "http://176.65.139.76/arm5", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:17 UTC", "discovered_at": "2026-10-02T18:44:17.000Z" }, { "id": 148507, "urlhaus_id": "3927017", "url": "http://176.65.139.76/bot.exe", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, exe, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:17 UTC", "discovered_at": "2026-10-02T18:44:17.000Z" }, { "id": 148506, "urlhaus_id": "3927016", "url": "http://176.65.139.76/i386", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:17 UTC", "discovered_at": "2026-10-02T18:44:17.000Z" }, { "id": 148505, "urlhaus_id": "3927015", "url": "http://176.65.139.76/android_arm64", "host": "176.65.139.76", "host_ip": "176.65.139.76", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-76, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:44:17 UTC", "discovered_at": "2026-10-02T18:44:17.000Z" }, { "id": 148516, "urlhaus_id": "3927014", "url": "http://176.65.139.135/bins/wget.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148515, "urlhaus_id": "3927013", "url": "http://176.65.139.135/w.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148514, "urlhaus_id": "3927012", "url": "http://176.65.139.135/z.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148513, "urlhaus_id": "3927011", "url": "http://176.65.139.135/dlink.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148512, "urlhaus_id": "3927010", "url": "http://176.65.139.135/c.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148511, "urlhaus_id": "3927009", "url": "http://176.65.139.135/bins/w.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148510, "urlhaus_id": "3927008", "url": "http://176.65.139.77/arm7", "host": "176.65.139.77", "host_ip": "176.65.139.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-77, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148509, "urlhaus_id": "3927007", "url": "http://176.65.139.77/mips", "host": "176.65.139.77", "host_ip": "176.65.139.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-77, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:22 UTC", "discovered_at": "2026-10-02T18:43:22.000Z" }, { "id": 148518, "urlhaus_id": "3927006", "url": "http://176.65.139.135/k.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:17 UTC", "discovered_at": "2026-10-02T18:43:17.000Z" }, { "id": 148517, "urlhaus_id": "3927005", "url": "http://176.65.139.135/av.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:43:17 UTC", "discovered_at": "2026-10-02T18:43:17.000Z" }, { "id": 148519, "urlhaus_id": "3927004", "url": "http://176.65.139.135/telnet.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:42:21 UTC", "discovered_at": "2026-10-02T18:42:21.000Z" }, { "id": 148520, "urlhaus_id": "3927003", "url": "http://176.65.139.135/bins/c.sh", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:41:22 UTC", "discovered_at": "2026-10-02T18:41:22.000Z" }, { "id": 148521, "urlhaus_id": "3927002", "url": "http://176.65.139.135/x86", "host": "176.65.139.135", "host_ip": "176.65.139.135", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-135, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:41:21 UTC", "discovered_at": "2026-10-02T18:41:21.000Z" }, { "id": 148523, "urlhaus_id": "3927001", "url": "http://176.65.139.78/eclipse.i686", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:23 UTC", "discovered_at": "2026-10-02T18:38:23.000Z" }, { "id": 148522, "urlhaus_id": "3927000", "url": "http://176.65.139.78/eclipse.armv7l", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:23 UTC", "discovered_at": "2026-10-02T18:38:23.000Z" }, { "id": 148527, "urlhaus_id": "3926999", "url": "http://176.65.139.78/eclipse.powerpc-440fp", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:17 UTC", "discovered_at": "2026-10-02T18:38:17.000Z" }, { "id": 148526, "urlhaus_id": "3926998", "url": "http://176.65.139.78/eclipse.armv4l", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:17 UTC", "discovered_at": "2026-10-02T18:38:17.000Z" }, { "id": 148525, "urlhaus_id": "3926997", "url": "http://176.65.139.78/eclipse.x86_64", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:17 UTC", "discovered_at": "2026-10-02T18:38:17.000Z" }, { "id": 148524, "urlhaus_id": "3926996", "url": "http://176.65.139.78/eclipse.mips", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:17 UTC", "discovered_at": "2026-10-02T18:38:17.000Z" }, { "id": 148534, "urlhaus_id": "3926995", "url": "http://176.65.139.78/eclipse.powerpc", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:16 UTC", "discovered_at": "2026-10-02T18:38:16.000Z" }, { "id": 148533, "urlhaus_id": "3926994", "url": "http://176.65.139.78/eclipse.mipsel", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:16 UTC", "discovered_at": "2026-10-02T18:38:16.000Z" }, { "id": 148532, "urlhaus_id": "3926993", "url": "http://176.65.139.78/eclipse.armv6l", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:16 UTC", "discovered_at": "2026-10-02T18:38:16.000Z" }, { "id": 148531, "urlhaus_id": "3926992", "url": "http://176.65.139.78/eclipse.armv5l", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:16 UTC", "discovered_at": "2026-10-02T18:38:16.000Z" }, { "id": 148530, "urlhaus_id": "3926991", "url": "http://176.65.139.78/eclipse.sh4", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:16 UTC", "discovered_at": "2026-10-02T18:38:16.000Z" }, { "id": 148529, "urlhaus_id": "3926990", "url": "http://176.65.139.78/eclipse.m68k", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:16 UTC", "discovered_at": "2026-10-02T18:38:16.000Z" }, { "id": 148528, "urlhaus_id": "3926989", "url": "http://176.65.139.78/eclipse.i586", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:16 UTC", "discovered_at": "2026-10-02T18:38:16.000Z" }, { "id": 148536, "urlhaus_id": "3926988", "url": "http://176.65.139.78/eclipse.sh", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:14 UTC", "discovered_at": "2026-10-02T18:38:14.000Z" }, { "id": 148535, "urlhaus_id": "3926987", "url": "http://176.65.139.78/loader.sh", "host": "176.65.139.78", "host_ip": "176.65.139.78", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-78, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 18:38:14 UTC", "discovered_at": "2026-10-02T18:38:14.000Z" }, { "id": 148537, "urlhaus_id": "3926986", "url": "http://60.23.235.214:54960/bin.sh", "host": "60.23.235.214", "host_ip": "60.23.235.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 18:33:27 UTC", "discovered_at": "2026-10-02T18:33:27.000Z" }, { "id": 148538, "urlhaus_id": "3926985", "url": "http://42.231.88.16:52149/i", "host": "42.231.88.16", "host_ip": "42.231.88.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 18:33:19 UTC", "discovered_at": "2026-10-02T18:33:19.000Z" }, { "id": 148539, "urlhaus_id": "3926984", "url": "http://27.202.233.40:54686/i", "host": "27.202.233.40", "host_ip": "27.202.233.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 18:33:17 UTC", "discovered_at": "2026-10-02T18:33:17.000Z" }, { "id": 148542, "urlhaus_id": "3926983", "url": "http://180.252.210.87:46043/bin.sh", "host": "180.252.210.87", "host_ip": "180.252.210.87", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:32:13 UTC", "discovered_at": "2026-10-02T18:32:13.000Z" }, { "id": 148541, "urlhaus_id": "3926982", "url": "http://115.52.195.240:47476/i", "host": "115.52.195.240", "host_ip": "115.52.195.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 18:32:13 UTC", "discovered_at": "2026-10-02T18:32:13.000Z" }, { "id": 148540, "urlhaus_id": "3926981", "url": "http://105.224.39.210:50985/i", "host": "105.224.39.210", "host_ip": "105.224.39.210", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:32:13 UTC", "discovered_at": "2026-10-02T18:32:13.000Z" }, { "id": 148544, "urlhaus_id": "3926980", "url": "http://42.55.60.190:56286/i", "host": "42.55.60.190", "host_ip": "42.55.60.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:32:12 UTC", "discovered_at": "2026-10-02T18:32:12.000Z" }, { "id": 148543, "urlhaus_id": "3926979", "url": "http://119.115.161.6:43861/bin.sh", "host": "119.115.161.6", "host_ip": "119.115.161.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:32:12 UTC", "discovered_at": "2026-10-02T18:32:12.000Z" }, { "id": 148545, "urlhaus_id": "3926978", "url": "http://180.116.249.8:39605/i", "host": "180.116.249.8", "host_ip": "180.116.249.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 18:23:23 UTC", "discovered_at": "2026-10-02T18:23:23.000Z" }, { "id": 148546, "urlhaus_id": "3926977", "url": "http://170.238.123.241:59323/i", "host": "170.238.123.241", "host_ip": "170.238.123.241", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 18:18:12 UTC", "discovered_at": "2026-10-02T18:18:12.000Z" }, { "id": 148547, "urlhaus_id": "3926976", "url": "http://123.190.224.41:49515/i", "host": "123.190.224.41", "host_ip": "123.190.224.41", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 18:17:28 UTC", "discovered_at": "2026-10-02T18:17:28.000Z" }, { "id": 148549, "urlhaus_id": "3926975", "url": "http://117.82.160.238:59175/i", "host": "117.82.160.238", "host_ip": "117.82.160.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:17:18 UTC", "discovered_at": "2026-10-02T18:17:18.000Z" }, { "id": 148548, "urlhaus_id": "3926974", "url": "http://175.150.147.4:33541/bin.sh", "host": "175.150.147.4", "host_ip": "175.150.147.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:17:18 UTC", "discovered_at": "2026-10-02T18:17:18.000Z" }, { "id": 148552, "urlhaus_id": "3926973", "url": "http://123.11.77.228:36440/i", "host": "123.11.77.228", "host_ip": "123.11.77.228", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:17:17 UTC", "discovered_at": "2026-10-02T18:17:17.000Z" }, { "id": 148551, "urlhaus_id": "3926972", "url": "http://221.200.211.78:33954/i", "host": "221.200.211.78", "host_ip": "221.200.211.78", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:17:17 UTC", "discovered_at": "2026-10-02T18:17:17.000Z" }, { "id": 148550, "urlhaus_id": "3926971", "url": "http://170.238.123.241:59323/bin.sh", "host": "170.238.123.241", "host_ip": "170.238.123.241", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:17:17 UTC", "discovered_at": "2026-10-02T18:17:17.000Z" }, { "id": 148553, "urlhaus_id": "3926970", "url": "http://182.121.8.77:58853/i", "host": "182.121.8.77", "host_ip": "182.121.8.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 18:17:16 UTC", "discovered_at": "2026-10-02T18:17:16.000Z" }, { "id": 148554, "urlhaus_id": "3926969", "url": "http://185.239.57.147:4188/bin.sh", "host": "185.239.57.147", "host_ip": "185.239.57.147", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:02:18 UTC", "discovered_at": "2026-10-02T18:02:18.000Z" }, { "id": 148555, "urlhaus_id": "3926968", "url": "http://182.121.8.77:58853/bin.sh", "host": "182.121.8.77", "host_ip": "182.121.8.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 18:02:15 UTC", "discovered_at": "2026-10-02T18:02:15.000Z" }, { "id": 148560, "urlhaus_id": "3926967", "url": "http://210.97.100.192:58715/bin.sh", "host": "210.97.100.192", "host_ip": "210.97.100.192", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:02:14 UTC", "discovered_at": "2026-10-02T18:02:14.000Z" }, { "id": 148559, "urlhaus_id": "3926966", "url": "http://39.87.121.69:50608/i", "host": "39.87.121.69", "host_ip": "39.87.121.69", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 18:02:14 UTC", "discovered_at": "2026-10-02T18:02:14.000Z" }, { "id": 148558, "urlhaus_id": "3926965", "url": "http://123.11.77.228:36440/bin.sh", "host": "123.11.77.228", "host_ip": "123.11.77.228", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 18:02:14 UTC", "discovered_at": "2026-10-02T18:02:14.000Z" }, { "id": 148557, "urlhaus_id": "3926964", "url": "http://200.115.102.2:35242/i", "host": "200.115.102.2", "host_ip": "200.115.102.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:02:14 UTC", "discovered_at": "2026-10-02T18:02:14.000Z" }, { "id": 148556, "urlhaus_id": "3926963", "url": "http://221.15.177.114:35763/i", "host": "221.15.177.114", "host_ip": "221.15.177.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 18:02:14 UTC", "discovered_at": "2026-10-02T18:02:14.000Z" }, { "id": 148561, "urlhaus_id": "3926962", "url": "http://180.116.249.8:39605/bin.sh", "host": "180.116.249.8", "host_ip": "180.116.249.8", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 18:01:31 UTC", "discovered_at": "2026-10-02T18:01:31.000Z" }, { "id": 148562, "urlhaus_id": "3926961", "url": "http://62.60.226.140/files/5279938618/opNdkwr.exe", "host": "62.60.226.140", "host_ip": "62.60.226.140", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "d52f85, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-02 17:49:14 UTC", "discovered_at": "2026-10-02T17:49:14.000Z" }, { "id": 148563, "urlhaus_id": "3926960", "url": "http://222.141.191.123:47676/i", "host": "222.141.191.123", "host_ip": "222.141.191.123", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 17:47:19 UTC", "discovered_at": "2026-10-02T17:47:19.000Z" }, { "id": 148564, "urlhaus_id": "3926959", "url": "http://222.141.2.255:39795/i", "host": "222.141.2.255", "host_ip": "222.141.2.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 17:47:18 UTC", "discovered_at": "2026-10-02T17:47:18.000Z" }, { "id": 148565, "urlhaus_id": "3926958", "url": "http://193.178.158.57/bin/e6efd8bd3bf0fae2_moratorium_0.96.2.9_INSTALL.exe", "host": "193.178.158.57", "host_ip": "193.178.158.57", "url_status": "online", "online": true, "threat": "malware_download", "tags": "579cd0, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-02 17:44:15 UTC", "discovered_at": "2026-10-02T17:44:15.000Z" }, { "id": 148566, "urlhaus_id": "3926957", "url": "http://175.165.83.136:48805/i", "host": "175.165.83.136", "host_ip": "175.165.83.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 17:32:21 UTC", "discovered_at": "2026-10-02T17:32:21.000Z" }, { "id": 148567, "urlhaus_id": "3926956", "url": "http://221.15.177.114:35763/bin.sh", "host": "221.15.177.114", "host_ip": "221.15.177.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 17:32:13 UTC", "discovered_at": "2026-10-02T17:32:13.000Z" }, { "id": 148568, "urlhaus_id": "3926955", "url": "http://38.58.201.172:56544/i", "host": "38.58.201.172", "host_ip": "38.58.201.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 17:32:11 UTC", "discovered_at": "2026-10-02T17:32:11.000Z" }, { "id": 148569, "urlhaus_id": "3926954", "url": "http://27.207.114.102:36265/i", "host": "27.207.114.102", "host_ip": "27.207.114.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 17:17:16 UTC", "discovered_at": "2026-10-02T17:17:16.000Z" }, { "id": 148570, "urlhaus_id": "3926953", "url": "http://112.198.130.112:33132/i", "host": "112.198.130.112", "host_ip": "112.198.130.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 17:17:15 UTC", "discovered_at": "2026-10-02T17:17:15.000Z" }, { "id": 148571, "urlhaus_id": "3926952", "url": "http://123.10.137.238:32895/i", "host": "123.10.137.238", "host_ip": "123.10.137.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 17:10:23 UTC", "discovered_at": "2026-10-02T17:10:23.000Z" }, { "id": 148573, "urlhaus_id": "3926951", "url": "http://42.239.240.214:36450/i", "host": "42.239.240.214", "host_ip": "42.239.240.214", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 17:02:14 UTC", "discovered_at": "2026-10-02T17:02:14.000Z" }, { "id": 148572, "urlhaus_id": "3926950", "url": "http://5.167.65.75:57041/i", "host": "5.167.65.75", "host_ip": "5.167.65.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 17:02:14 UTC", "discovered_at": "2026-10-02T17:02:14.000Z" }, { "id": 148574, "urlhaus_id": "3926949", "url": "http://182.117.86.174:42569/bin.sh", "host": "182.117.86.174", "host_ip": "182.117.86.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 17:02:13 UTC", "discovered_at": "2026-10-02T17:02:13.000Z" }, { "id": 148575, "urlhaus_id": "3926948", "url": "http://182.117.86.174:42569/i", "host": "182.117.86.174", "host_ip": "182.117.86.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 16:52:29 UTC", "discovered_at": "2026-10-02T16:52:29.000Z" }, { "id": 148576, "urlhaus_id": "3926947", "url": "http://115.55.23.171:47870/bin.sh", "host": "115.55.23.171", "host_ip": "115.55.23.171", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 16:47:13 UTC", "discovered_at": "2026-10-02T16:47:13.000Z" }, { "id": 148577, "urlhaus_id": "3926946", "url": "http://175.165.83.136:48805/bin.sh", "host": "175.165.83.136", "host_ip": "175.165.83.136", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 16:32:14 UTC", "discovered_at": "2026-10-02T16:32:14.000Z" }, { "id": 148578, "urlhaus_id": "3926945", "url": "http://27.215.78.29:44569/bin.sh", "host": "27.215.78.29", "host_ip": "27.215.78.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 16:32:12 UTC", "discovered_at": "2026-10-02T16:32:12.000Z" }, { "id": 148579, "urlhaus_id": "3926944", "url": "http://5.167.65.75:57041/bin.sh", "host": "5.167.65.75", "host_ip": "5.167.65.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 16:32:10 UTC", "discovered_at": "2026-10-02T16:32:10.000Z" }, { "id": 148580, "urlhaus_id": "3926943", "url": "http://59.180.148.204:55956/i", "host": "59.180.148.204", "host_ip": "59.180.148.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 16:27:32 UTC", "discovered_at": "2026-10-02T16:27:32.000Z" }, { "id": 148581, "urlhaus_id": "3926942", "url": "http://221.202.230.86:55217/i", "host": "221.202.230.86", "host_ip": "221.202.230.86", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 16:17:12 UTC", "discovered_at": "2026-10-02T16:17:12.000Z" }, { "id": 148582, "urlhaus_id": "3926941", "url": "http://115.56.156.34:42802/i", "host": "115.56.156.34", "host_ip": "115.56.156.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 16:16:22 UTC", "discovered_at": "2026-10-02T16:16:22.000Z" }, { "id": 148584, "urlhaus_id": "3926940", "url": "http://222.137.147.93:44510/i", "host": "222.137.147.93", "host_ip": "222.137.147.93", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 16:16:15 UTC", "discovered_at": "2026-10-02T16:16:15.000Z" }, { "id": 148583, "urlhaus_id": "3926939", "url": "http://219.155.202.2:47250/i", "host": "219.155.202.2", "host_ip": "219.155.202.2", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 16:16:15 UTC", "discovered_at": "2026-10-02T16:16:15.000Z" }, { "id": 148586, "urlhaus_id": "3926938", "url": "http://36.69.88.61:37282/i", "host": "36.69.88.61", "host_ip": "36.69.88.61", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 16:16:14 UTC", "discovered_at": "2026-10-02T16:16:14.000Z" }, { "id": 148585, "urlhaus_id": "3926937", "url": "http://103.31.103.204:55084/i", "host": "103.31.103.204", "host_ip": "103.31.103.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 16:16:14 UTC", "discovered_at": "2026-10-02T16:16:14.000Z" }, { "id": 148587, "urlhaus_id": "3926936", "url": "http://176.65.139.201:8080/bot-linux-mipsle", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-02 16:13:25 UTC", "discovered_at": "2026-10-02T16:13:25.000Z" }, { "id": 148588, "urlhaus_id": "3926935", "url": "http://176.65.139.201:8080/bot-linux-amd64", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-02 16:12:30 UTC", "discovered_at": "2026-10-02T16:12:30.000Z" }, { "id": 148590, "urlhaus_id": "3926934", "url": "http://176.65.139.201:8080/bot-linux-mips", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-02 16:12:23 UTC", "discovered_at": "2026-10-02T16:12:23.000Z" }, { "id": 148589, "urlhaus_id": "3926933", "url": "http://176.65.139.201:8080/bot-linux-arm64", "host": "176.65.139.201", "host_ip": "176.65.139.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-02 16:12:23 UTC", "discovered_at": "2026-10-02T16:12:23.000Z" }, { "id": 148591, "urlhaus_id": "3926932", "url": "http://xiangduck.sld.tw/violet.mpsl", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 16:11:31 UTC", "discovered_at": "2026-10-02T16:11:31.000Z" }, { "id": 148592, "urlhaus_id": "3926931", "url": "https://raw.githubusercontent.com/thuhangn562727-del/maqueo/refs/heads/main/nanocore.js?download=1", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "AsynxRAT, js", "last_online": null, "first_seen": "2026-10-02 16:11:17 UTC", "discovered_at": "2026-10-02T16:11:17.000Z" }, { "id": 148595, "urlhaus_id": "3926930", "url": "http://42.57.40.143:38792/i", "host": "42.57.40.143", "host_ip": "42.57.40.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 16:11:16 UTC", "discovered_at": "2026-10-02T16:11:16.000Z" }, { "id": 148594, "urlhaus_id": "3926929", "url": "http://36.64.184.26:50241/i", "host": "36.64.184.26", "host_ip": "36.64.184.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 16:11:16 UTC", "discovered_at": "2026-10-02T16:11:16.000Z" }, { "id": 148593, "urlhaus_id": "3926928", "url": "http://123.14.186.187:41341/i", "host": "123.14.186.187", "host_ip": "123.14.186.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 16:11:16 UTC", "discovered_at": "2026-10-02T16:11:16.000Z" }, { "id": 148596, "urlhaus_id": "3926927", "url": "http://198.12.126.187/35/goodnewsthings.jS", "host": "198.12.126.187", "host_ip": "198.12.126.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, js, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-02 16:11:15 UTC", "discovered_at": "2026-10-02T16:11:15.000Z" }, { "id": 148597, "urlhaus_id": "3926926", "url": "http://198.12.126.187/35/JJN.htA", "host": "198.12.126.187", "host_ip": "198.12.126.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, hta, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-02 16:11:13 UTC", "discovered_at": "2026-10-02T16:11:13.000Z" }, { "id": 148598, "urlhaus_id": "3926925", "url": "http://xiangduck.sld.tw/violet.ppc", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:55:37 UTC", "discovered_at": "2026-10-02T15:55:37.000Z" }, { "id": 148600, "urlhaus_id": "3926924", "url": "https://cdn.discordapp.com/attachments/1298616021669773397/1555599712193617980/bundle.zip?ex=6ac11ca1&is=6abfcb21&hm=31fffac8b6682f01a319aafe97f2517105c394975ec324877db5a03bd59373bb&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-02 15:55:28 UTC", "discovered_at": "2026-10-02T15:55:28.000Z" }, { "id": 148599, "urlhaus_id": "3926923", "url": "http://xiangduck.sld.tw/violet.arm", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:55:28 UTC", "discovered_at": "2026-10-02T15:55:28.000Z" }, { "id": 148601, "urlhaus_id": "3926922", "url": "http://xiangduck.sld.tw/violet.spc", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:55:27 UTC", "discovered_at": "2026-10-02T15:55:27.000Z" }, { "id": 148607, "urlhaus_id": "3926921", "url": "http://xiangduck.sld.tw/violet.arm6", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:55:26 UTC", "discovered_at": "2026-10-02T15:55:26.000Z" }, { "id": 148606, "urlhaus_id": "3926920", "url": "http://xiangduck.sld.tw/violet.mips", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:55:26 UTC", "discovered_at": "2026-10-02T15:55:26.000Z" }, { "id": 148605, "urlhaus_id": "3926919", "url": "http://xiangduck.sld.tw/violet.sh4", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:55:26 UTC", "discovered_at": "2026-10-02T15:55:26.000Z" }, { "id": 148604, "urlhaus_id": "3926918", "url": "http://xiangduck.sld.tw/violet.arm7", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:55:26 UTC", "discovered_at": "2026-10-02T15:55:26.000Z" }, { "id": 148603, "urlhaus_id": "3926917", "url": "http://xiangduck.sld.tw/violet.arm5", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:55:26 UTC", "discovered_at": "2026-10-02T15:55:26.000Z" }, { "id": 148602, "urlhaus_id": "3926916", "url": "http://xiangduck.sld.tw/violet.m68k", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:55:26 UTC", "discovered_at": "2026-10-02T15:55:26.000Z" }, { "id": 148608, "urlhaus_id": "3926915", "url": "http://xiangduck.sld.tw/violet.x86", "host": "xiangduck.sld.tw", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:55:25 UTC", "discovered_at": "2026-10-02T15:55:25.000Z" }, { "id": 148609, "urlhaus_id": "3926914", "url": "http://139.144.210.113/wget", "host": "139.144.210.113", "host_ip": "139.144.210.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-02 15:55:16 UTC", "discovered_at": "2026-10-02T15:55:16.000Z" }, { "id": 148610, "urlhaus_id": "3926913", "url": "http://36.69.88.61:37282/bin.sh", "host": "36.69.88.61", "host_ip": "36.69.88.61", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:47:21 UTC", "discovered_at": "2026-10-02T15:47:21.000Z" }, { "id": 148611, "urlhaus_id": "3926912", "url": "http://119.187.177.158:40993/i", "host": "119.187.177.158", "host_ip": "119.187.177.158", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:47:15 UTC", "discovered_at": "2026-10-02T15:47:15.000Z" }, { "id": 148612, "urlhaus_id": "3926911", "url": "http://182.127.115.80:48436/i", "host": "182.127.115.80", "host_ip": "182.127.115.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:47:13 UTC", "discovered_at": "2026-10-02T15:47:13.000Z" }, { "id": 148615, "urlhaus_id": "3926910", "url": "http://27.206.184.220:55514/i", "host": "27.206.184.220", "host_ip": "27.206.184.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 15:47:12 UTC", "discovered_at": "2026-10-02T15:47:12.000Z" }, { "id": 148614, "urlhaus_id": "3926909", "url": "http://182.122.242.126:59890/bin.sh", "host": "182.122.242.126", "host_ip": "182.122.242.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 15:47:12 UTC", "discovered_at": "2026-10-02T15:47:12.000Z" }, { "id": 148613, "urlhaus_id": "3926908", "url": "http://83.219.1.198:41399/i", "host": "83.219.1.198", "host_ip": "83.219.1.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 15:47:12 UTC", "discovered_at": "2026-10-02T15:47:12.000Z" }, { "id": 148616, "urlhaus_id": "3926907", "url": "http://42.235.36.159:48538/bin.sh", "host": "42.235.36.159", "host_ip": "42.235.36.159", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 15:38:24 UTC", "discovered_at": "2026-10-02T15:38:24.000Z" }, { "id": 148617, "urlhaus_id": "3926906", "url": "http://221.1.225.141:43322/i", "host": "221.1.225.141", "host_ip": "221.1.225.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 15:34:22 UTC", "discovered_at": "2026-10-02T15:34:22.000Z" }, { "id": 148618, "urlhaus_id": "3926905", "url": "http://180.190.240.131:48202/i", "host": "180.190.240.131", "host_ip": "180.190.240.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:31:21 UTC", "discovered_at": "2026-10-02T15:31:21.000Z" }, { "id": 148620, "urlhaus_id": "3926904", "url": "http://103.126.201.130:56125/i", "host": "103.126.201.130", "host_ip": "103.126.201.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 15:31:20 UTC", "discovered_at": "2026-10-02T15:31:20.000Z" }, { "id": 148619, "urlhaus_id": "3926903", "url": "http://180.190.203.41:52366/i", "host": "180.190.203.41", "host_ip": "180.190.203.41", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:31:20 UTC", "discovered_at": "2026-10-02T15:31:20.000Z" }, { "id": 148621, "urlhaus_id": "3926902", "url": "http://218.16.164.103:47517/i", "host": "218.16.164.103", "host_ip": "218.16.164.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 15:25:27 UTC", "discovered_at": "2026-10-02T15:25:27.000Z" }, { "id": 148622, "urlhaus_id": "3926901", "url": "http://182.127.115.80:48436/bin.sh", "host": "182.127.115.80", "host_ip": "182.127.115.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:17:15 UTC", "discovered_at": "2026-10-02T15:17:15.000Z" }, { "id": 148625, "urlhaus_id": "3926900", "url": "http://60.22.148.175:58364/i", "host": "60.22.148.175", "host_ip": "60.22.148.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 15:17:14 UTC", "discovered_at": "2026-10-02T15:17:14.000Z" }, { "id": 148624, "urlhaus_id": "3926899", "url": "http://180.190.202.146:46282/bin.sh", "host": "180.190.202.146", "host_ip": "180.190.202.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 15:17:14 UTC", "discovered_at": "2026-10-02T15:17:14.000Z" }, { "id": 148623, "urlhaus_id": "3926898", "url": "http://42.229.166.105:55384/bin.sh", "host": "42.229.166.105", "host_ip": "42.229.166.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 15:17:14 UTC", "discovered_at": "2026-10-02T15:17:14.000Z" }, { "id": 148626, "urlhaus_id": "3926897", "url": "http://123.14.247.181:35228/i", "host": "123.14.247.181", "host_ip": "123.14.247.181", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 15:02:12 UTC", "discovered_at": "2026-10-02T15:02:12.000Z" }, { "id": 148627, "urlhaus_id": "3926896", "url": "http://218.16.164.103:47517/bin.sh", "host": "218.16.164.103", "host_ip": "218.16.164.103", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 14:55:26 UTC", "discovered_at": "2026-10-02T14:55:26.000Z" }, { "id": 148628, "urlhaus_id": "3926895", "url": "http://203.12.31.75/c/b7d14c80.dat", "host": "203.12.31.75", "host_ip": "203.12.31.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "FaceIT, powershell, rat, WebSocket, ClickFix", "last_online": null, "first_seen": "2026-10-02 14:55:12 UTC", "discovered_at": "2026-10-02T14:55:12.000Z" }, { "id": 148629, "urlhaus_id": "3926894", "url": "http://123.5.125.157:43784/i", "host": "123.5.125.157", "host_ip": "123.5.125.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 14:47:14 UTC", "discovered_at": "2026-10-02T14:47:14.000Z" }, { "id": 148630, "urlhaus_id": "3926893", "url": "http://79.36.217.100:36453/bin.sh", "host": "79.36.217.100", "host_ip": "79.36.217.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 14:47:13 UTC", "discovered_at": "2026-10-02T14:47:13.000Z" }, { "id": 148631, "urlhaus_id": "3926892", "url": "http://221.1.225.141:43322/bin.sh", "host": "221.1.225.141", "host_ip": "221.1.225.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 14:42:27 UTC", "discovered_at": "2026-10-02T14:42:27.000Z" }, { "id": 148632, "urlhaus_id": "3926891", "url": "http://223.151.253.6:48039/i", "host": "223.151.253.6", "host_ip": "223.151.253.6", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 14:32:39 UTC", "discovered_at": "2026-10-02T14:32:39.000Z" }, { "id": 148633, "urlhaus_id": "3926890", "url": "http://60.22.148.175:58364/bin.sh", "host": "60.22.148.175", "host_ip": "60.22.148.175", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 14:32:24 UTC", "discovered_at": "2026-10-02T14:32:24.000Z" }, { "id": 148634, "urlhaus_id": "3926889", "url": "http://180.190.202.146:46282/i", "host": "180.190.202.146", "host_ip": "180.190.202.146", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 14:32:23 UTC", "discovered_at": "2026-10-02T14:32:23.000Z" }, { "id": 148635, "urlhaus_id": "3926888", "url": "http://180.243.176.58:37998/i", "host": "180.243.176.58", "host_ip": "180.243.176.58", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 14:32:14 UTC", "discovered_at": "2026-10-02T14:32:14.000Z" }, { "id": 148636, "urlhaus_id": "3926887", "url": "http://61.53.85.131:35555/i", "host": "61.53.85.131", "host_ip": "61.53.85.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 14:32:12 UTC", "discovered_at": "2026-10-02T14:32:12.000Z" }, { "id": 148637, "urlhaus_id": "3926886", "url": "http://119.185.189.113:47549/i", "host": "119.185.189.113", "host_ip": "119.185.189.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 14:18:12 UTC", "discovered_at": "2026-10-02T14:18:12.000Z" }, { "id": 148639, "urlhaus_id": "3926885", "url": "http://115.50.253.9:48225/i", "host": "115.50.253.9", "host_ip": "115.50.253.9", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 14:17:18 UTC", "discovered_at": "2026-10-02T14:17:18.000Z" }, { "id": 148638, "urlhaus_id": "3926884", "url": "http://60.23.154.251:58373/i", "host": "60.23.154.251", "host_ip": "60.23.154.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 14:17:18 UTC", "discovered_at": "2026-10-02T14:17:18.000Z" }, { "id": 148640, "urlhaus_id": "3926883", "url": "http://27.28.99.89:57238/i", "host": "27.28.99.89", "host_ip": "27.28.99.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 14:02:13 UTC", "discovered_at": "2026-10-02T14:02:13.000Z" }, { "id": 148641, "urlhaus_id": "3926882", "url": "http://175.146.231.178:37066/i", "host": "175.146.231.178", "host_ip": "175.146.231.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 14:02:12 UTC", "discovered_at": "2026-10-02T14:02:12.000Z" }, { "id": 148642, "urlhaus_id": "3926881", "url": "http://195.178.110.48:8099/mrun", "host": "195.178.110.48", "host_ip": "195.178.110.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "redis, sh", "last_online": null, "first_seen": "2026-10-02 13:55:38 UTC", "discovered_at": "2026-10-02T13:55:38.000Z" }, { "id": 148643, "urlhaus_id": "3926880", "url": "http://195.178.110.48:8099/beat_up", "host": "195.178.110.48", "host_ip": "195.178.110.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "beacon, redis", "last_online": null, "first_seen": "2026-10-02 13:55:29 UTC", "discovered_at": "2026-10-02T13:55:29.000Z" }, { "id": 148644, "urlhaus_id": "3926879", "url": "http://124.94.244.141:37757/i", "host": "124.94.244.141", "host_ip": "124.94.244.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 13:38:27 UTC", "discovered_at": "2026-10-02T13:38:27.000Z" }, { "id": 148648, "urlhaus_id": "3926878", "url": "http://42.229.166.105:55384/i", "host": "42.229.166.105", "host_ip": "42.229.166.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 13:32:13 UTC", "discovered_at": "2026-10-02T13:32:13.000Z" }, { "id": 148647, "urlhaus_id": "3926877", "url": "http://116.138.109.113:57675/i", "host": "116.138.109.113", "host_ip": "116.138.109.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 13:32:13 UTC", "discovered_at": "2026-10-02T13:32:13.000Z" }, { "id": 148646, "urlhaus_id": "3926876", "url": "http://176.194.109.14:48916/i", "host": "176.194.109.14", "host_ip": "176.194.109.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 13:32:13 UTC", "discovered_at": "2026-10-02T13:32:13.000Z" }, { "id": 148645, "urlhaus_id": "3926875", "url": "http://123.189.177.133:48431/bin.sh", "host": "123.189.177.133", "host_ip": "123.189.177.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 13:32:13 UTC", "discovered_at": "2026-10-02T13:32:13.000Z" }, { "id": 148649, "urlhaus_id": "3926874", "url": "http://61.52.3.238:60044/bin.sh", "host": "61.52.3.238", "host_ip": "61.52.3.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 13:17:19 UTC", "discovered_at": "2026-10-02T13:17:19.000Z" }, { "id": 148651, "urlhaus_id": "3926873", "url": "http://175.146.231.178:37066/bin.sh", "host": "175.146.231.178", "host_ip": "175.146.231.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 13:17:15 UTC", "discovered_at": "2026-10-02T13:17:15.000Z" }, { "id": 148650, "urlhaus_id": "3926872", "url": "http://61.52.3.238:60044/i", "host": "61.52.3.238", "host_ip": "61.52.3.238", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 13:17:15 UTC", "discovered_at": "2026-10-02T13:17:15.000Z" }, { "id": 148652, "urlhaus_id": "3926871", "url": "http://119.187.177.77:56649/i", "host": "119.187.177.77", "host_ip": "119.187.177.77", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 13:02:14 UTC", "discovered_at": "2026-10-02T13:02:14.000Z" }, { "id": 148653, "urlhaus_id": "3926870", "url": "http://14.20.223.60:39837/i", "host": "14.20.223.60", "host_ip": "14.20.223.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 13:02:12 UTC", "discovered_at": "2026-10-02T13:02:12.000Z" }, { "id": 148655, "urlhaus_id": "3926869", "url": "http://123.14.186.187:41341/bin.sh", "host": "123.14.186.187", "host_ip": "123.14.186.187", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 13:02:11 UTC", "discovered_at": "2026-10-02T13:02:11.000Z" }, { "id": 148654, "urlhaus_id": "3926868", "url": "http://60.23.168.43:37885/bin.sh", "host": "60.23.168.43", "host_ip": "60.23.168.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 13:02:11 UTC", "discovered_at": "2026-10-02T13:02:11.000Z" }, { "id": 148656, "urlhaus_id": "3926867", "url": "http://175.147.88.71:57575/i", "host": "175.147.88.71", "host_ip": "175.147.88.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 12:47:13 UTC", "discovered_at": "2026-10-02T12:47:13.000Z" }, { "id": 148657, "urlhaus_id": "3926866", "url": "http://59.97.249.131:57056/i", "host": "59.97.249.131", "host_ip": "59.97.249.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 12:47:11 UTC", "discovered_at": "2026-10-02T12:47:11.000Z" }, { "id": 148658, "urlhaus_id": "3926865", "url": "http://176.194.109.14:48916/bin.sh", "host": "176.194.109.14", "host_ip": "176.194.109.14", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 12:46:14 UTC", "discovered_at": "2026-10-02T12:46:14.000Z" }, { "id": 148659, "urlhaus_id": "3926864", "url": "http://27.44.144.60:51674/bin.sh", "host": "27.44.144.60", "host_ip": "27.44.144.60", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 12:32:12 UTC", "discovered_at": "2026-10-02T12:32:12.000Z" }, { "id": 148660, "urlhaus_id": "3926863", "url": "http://60.23.233.128:46003/i", "host": "60.23.233.128", "host_ip": "60.23.233.128", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 12:31:13 UTC", "discovered_at": "2026-10-02T12:31:13.000Z" }, { "id": 148661, "urlhaus_id": "3926862", "url": "http://114.226.111.119:46491/bin.sh", "host": "114.226.111.119", "host_ip": "114.226.111.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 12:22:23 UTC", "discovered_at": "2026-10-02T12:22:23.000Z" }, { "id": 148662, "urlhaus_id": "3926861", "url": "http://221.14.17.152:59802/i", "host": "221.14.17.152", "host_ip": "221.14.17.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-02 12:19:24 UTC", "discovered_at": "2026-10-02T12:19:24.000Z" }, { "id": 148663, "urlhaus_id": "3926860", "url": "http://59.97.249.131:57056/bin.sh", "host": "59.97.249.131", "host_ip": "59.97.249.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 12:17:15 UTC", "discovered_at": "2026-10-02T12:17:15.000Z" }, { "id": 148665, "urlhaus_id": "3926859", "url": "http://125.41.75.185:35908/bin.sh", "host": "125.41.75.185", "host_ip": "125.41.75.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 12:17:14 UTC", "discovered_at": "2026-10-02T12:17:14.000Z" }, { "id": 148664, "urlhaus_id": "3926858", "url": "http://175.147.88.71:57575/bin.sh", "host": "175.147.88.71", "host_ip": "175.147.88.71", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 12:17:14 UTC", "discovered_at": "2026-10-02T12:17:14.000Z" }, { "id": 148666, "urlhaus_id": "3926857", "url": "http://60.23.233.128:46003/bin.sh", "host": "60.23.233.128", "host_ip": "60.23.233.128", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 12:17:13 UTC", "discovered_at": "2026-10-02T12:17:13.000Z" }, { "id": 148668, "urlhaus_id": "3926856", "url": "http://61.53.89.126:38372/i", "host": "61.53.89.126", "host_ip": "61.53.89.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 12:02:12 UTC", "discovered_at": "2026-10-02T12:02:12.000Z" }, { "id": 148667, "urlhaus_id": "3926855", "url": "http://115.50.36.197:55637/i", "host": "115.50.36.197", "host_ip": "115.50.36.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 12:02:12 UTC", "discovered_at": "2026-10-02T12:02:12.000Z" }, { "id": 148669, "urlhaus_id": "3926854", "url": "http://42.227.145.212:40145/i", "host": "42.227.145.212", "host_ip": "42.227.145.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 11:47:14 UTC", "discovered_at": "2026-10-02T11:47:14.000Z" }, { "id": 148670, "urlhaus_id": "3926853", "url": "http://115.58.86.96:52093/bin.sh", "host": "115.58.86.96", "host_ip": "115.58.86.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 11:33:13 UTC", "discovered_at": "2026-10-02T11:33:13.000Z" }, { "id": 148671, "urlhaus_id": "3926852", "url": "http://186.149.204.12:49065/i", "host": "186.149.204.12", "host_ip": "186.149.204.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 11:32:13 UTC", "discovered_at": "2026-10-02T11:32:13.000Z" }, { "id": 148674, "urlhaus_id": "3926851", "url": "http://222.127.73.23:35721/i", "host": "222.127.73.23", "host_ip": "222.127.73.23", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 11:32:11 UTC", "discovered_at": "2026-10-02T11:32:11.000Z" }, { "id": 148673, "urlhaus_id": "3926850", "url": "http://61.53.89.126:38372/bin.sh", "host": "61.53.89.126", "host_ip": "61.53.89.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 11:32:11 UTC", "discovered_at": "2026-10-02T11:32:11.000Z" }, { "id": 148672, "urlhaus_id": "3926849", "url": "http://125.45.137.39:43385/i", "host": "125.45.137.39", "host_ip": "125.45.137.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 11:32:11 UTC", "discovered_at": "2026-10-02T11:32:11.000Z" }, { "id": 148675, "urlhaus_id": "3926848", "url": "http://8.216.48.50/s/l3.sh", "host": "8.216.48.50", "host_ip": "8.216.48.50", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, bash, sh, ua-wget", "last_online": null, "first_seen": "2026-10-02 11:31:25 UTC", "discovered_at": "2026-10-02T11:31:25.000Z" }, { "id": 148676, "urlhaus_id": "3926847", "url": "http://61.52.84.197:54479/bin.sh", "host": "61.52.84.197", "host_ip": "61.52.84.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 11:18:26 UTC", "discovered_at": "2026-10-02T11:18:26.000Z" }, { "id": 148677, "urlhaus_id": "3926846", "url": "http://182.127.69.67:46810/i", "host": "182.127.69.67", "host_ip": "182.127.69.67", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 11:16:17 UTC", "discovered_at": "2026-10-02T11:16:17.000Z" }, { "id": 148678, "urlhaus_id": "3926845", "url": "http://122.138.231.222:52011/i", "host": "122.138.231.222", "host_ip": "122.138.231.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 11:16:16 UTC", "discovered_at": "2026-10-02T11:16:16.000Z" }, { "id": 148679, "urlhaus_id": "3926844", "url": "http://186.149.204.12:49065/bin.sh", "host": "186.149.204.12", "host_ip": "186.149.204.12", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 11:02:15 UTC", "discovered_at": "2026-10-02T11:02:15.000Z" }, { "id": 148680, "urlhaus_id": "3926843", "url": "http://45.5.88.205:53640/i", "host": "45.5.88.205", "host_ip": "45.5.88.205", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 11:02:14 UTC", "discovered_at": "2026-10-02T11:02:14.000Z" }, { "id": 148685, "urlhaus_id": "3926842", "url": "http://123.14.56.200:53073/bin.sh", "host": "123.14.56.200", "host_ip": "123.14.56.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 11:02:13 UTC", "discovered_at": "2026-10-02T11:02:13.000Z" }, { "id": 148684, "urlhaus_id": "3926841", "url": "http://27.210.169.183:53019/i", "host": "27.210.169.183", "host_ip": "27.210.169.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 11:02:13 UTC", "discovered_at": "2026-10-02T11:02:13.000Z" }, { "id": 148683, "urlhaus_id": "3926840", "url": "http://120.28.137.240:47125/i", "host": "120.28.137.240", "host_ip": "120.28.137.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 11:02:13 UTC", "discovered_at": "2026-10-02T11:02:13.000Z" }, { "id": 148682, "urlhaus_id": "3926839", "url": "http://123.11.36.82:53208/bin.sh", "host": "123.11.36.82", "host_ip": "123.11.36.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 11:02:13 UTC", "discovered_at": "2026-10-02T11:02:13.000Z" }, { "id": 148681, "urlhaus_id": "3926838", "url": "http://113.230.23.232:53820/bin.sh", "host": "113.230.23.232", "host_ip": "113.230.23.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 11:02:13 UTC", "discovered_at": "2026-10-02T11:02:13.000Z" }, { "id": 148686, "urlhaus_id": "3926837", "url": "http://122.138.231.222:52011/bin.sh", "host": "122.138.231.222", "host_ip": "122.138.231.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 10:47:14 UTC", "discovered_at": "2026-10-02T10:47:14.000Z" }, { "id": 148689, "urlhaus_id": "3926836", "url": "http://182.119.0.102:50824/bin.sh", "host": "182.119.0.102", "host_ip": "182.119.0.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 10:47:13 UTC", "discovered_at": "2026-10-02T10:47:13.000Z" }, { "id": 148688, "urlhaus_id": "3926835", "url": "http://120.28.137.240:47125/bin.sh", "host": "120.28.137.240", "host_ip": "120.28.137.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 10:47:13 UTC", "discovered_at": "2026-10-02T10:47:13.000Z" }, { "id": 148687, "urlhaus_id": "3926834", "url": "http://182.127.123.209:36544/i", "host": "182.127.123.209", "host_ip": "182.127.123.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 10:47:13 UTC", "discovered_at": "2026-10-02T10:47:13.000Z" }, { "id": 148690, "urlhaus_id": "3926833", "url": "http://27.206.198.146:35866/i", "host": "27.206.198.146", "host_ip": "27.206.198.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 10:44:31 UTC", "discovered_at": "2026-10-02T10:44:31.000Z" }, { "id": 148693, "urlhaus_id": "3926832", "url": "http://115.56.157.170:51884/bin.sh", "host": "115.56.157.170", "host_ip": "115.56.157.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:32:13 UTC", "discovered_at": "2026-10-02T10:32:13.000Z" }, { "id": 148692, "urlhaus_id": "3926831", "url": "http://115.56.157.170:51884/i", "host": "115.56.157.170", "host_ip": "115.56.157.170", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:32:13 UTC", "discovered_at": "2026-10-02T10:32:13.000Z" }, { "id": 148691, "urlhaus_id": "3926830", "url": "http://42.228.124.50:32883/bin.sh", "host": "42.228.124.50", "host_ip": "42.228.124.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 10:32:13 UTC", "discovered_at": "2026-10-02T10:32:13.000Z" }, { "id": 148694, "urlhaus_id": "3926829", "url": "http://36.70.98.162:38996/i", "host": "36.70.98.162", "host_ip": "36.70.98.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 10:17:26 UTC", "discovered_at": "2026-10-02T10:17:26.000Z" }, { "id": 148695, "urlhaus_id": "3926828", "url": "http://27.206.198.146:35866/bin.sh", "host": "27.206.198.146", "host_ip": "27.206.198.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 10:17:22 UTC", "discovered_at": "2026-10-02T10:17:22.000Z" }, { "id": 148698, "urlhaus_id": "3926827", "url": "http://108.168.10.70:38308/i", "host": "108.168.10.70", "host_ip": "108.168.10.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:17:09 UTC", "discovered_at": "2026-10-02T10:17:09.000Z" }, { "id": 148697, "urlhaus_id": "3926826", "url": "http://42.225.202.233:42911/i", "host": "42.225.202.233", "host_ip": "42.225.202.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:17:09 UTC", "discovered_at": "2026-10-02T10:17:09.000Z" }, { "id": 148696, "urlhaus_id": "3926825", "url": "http://153.117.53.24:41313/i", "host": "153.117.53.24", "host_ip": "153.117.53.24", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 10:17:09 UTC", "discovered_at": "2026-10-02T10:17:09.000Z" }, { "id": 148699, "urlhaus_id": "3926824", "url": "http://154.23.2.62:54919/i", "host": "154.23.2.62", "host_ip": "154.23.2.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 10:16:19 UTC", "discovered_at": "2026-10-02T10:16:19.000Z" }, { "id": 148700, "urlhaus_id": "3926823", "url": "http://115.62.25.225:33277/bin.sh", "host": "115.62.25.225", "host_ip": "115.62.25.225", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 10:13:20 UTC", "discovered_at": "2026-10-02T10:13:20.000Z" }, { "id": 148701, "urlhaus_id": "3926822", "url": "http://108.168.10.70:38308/bin.sh", "host": "108.168.10.70", "host_ip": "108.168.10.70", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:04:13 UTC", "discovered_at": "2026-10-02T10:04:13.000Z" }, { "id": 148702, "urlhaus_id": "3926821", "url": "http://39.90.151.154:40485/i", "host": "39.90.151.154", "host_ip": "39.90.151.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 10:04:12 UTC", "discovered_at": "2026-10-02T10:04:12.000Z" }, { "id": 148703, "urlhaus_id": "3926820", "url": "http://8.219.215.66:6364/linux", "host": "8.219.215.66", "host_ip": "8.219.215.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:03:39 UTC", "discovered_at": "2026-10-02T10:03:39.000Z" }, { "id": 148705, "urlhaus_id": "3926819", "url": "http://8.163.15.89:7214/linux", "host": "8.163.15.89", "host_ip": "8.163.15.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:00:20 UTC", "discovered_at": "2026-10-02T10:00:20.000Z" }, { "id": 148704, "urlhaus_id": "3926818", "url": "http://169.58.68.50:9555/linux", "host": "169.58.68.50", "host_ip": "169.58.68.50", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:00:20 UTC", "discovered_at": "2026-10-02T10:00:20.000Z" }, { "id": 148707, "urlhaus_id": "3926817", "url": "http://103.210.144.11/jireyrsdnf/li", "host": "103.210.144.11", "host_ip": "103.210.144.11", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:00:16 UTC", "discovered_at": "2026-10-02T10:00:16.000Z" }, { "id": 148706, "urlhaus_id": "3926816", "url": "http://96.62.71.5:8080/bots", "host": "96.62.71.5", "host_ip": "96.62.71.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:00:16 UTC", "discovered_at": "2026-10-02T10:00:16.000Z" }, { "id": 148708, "urlhaus_id": "3926815", "url": "http://176.65.139.157/telnet2.sh", "host": "176.65.139.157", "host_ip": "176.65.139.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 10:00:15 UTC", "discovered_at": "2026-10-02T10:00:15.000Z" }, { "id": 148712, "urlhaus_id": "3926814", "url": "http://113.230.23.232:53820/i", "host": "113.230.23.232", "host_ip": "113.230.23.232", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 09:47:14 UTC", "discovered_at": "2026-10-02T09:47:14.000Z" }, { "id": 148711, "urlhaus_id": "3926813", "url": "http://113.237.104.128:52331/i", "host": "113.237.104.128", "host_ip": "113.237.104.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 09:47:14 UTC", "discovered_at": "2026-10-02T09:47:14.000Z" }, { "id": 148710, "urlhaus_id": "3926812", "url": "http://112.225.78.108:53589/i", "host": "112.225.78.108", "host_ip": "112.225.78.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 09:47:14 UTC", "discovered_at": "2026-10-02T09:47:14.000Z" }, { "id": 148709, "urlhaus_id": "3926811", "url": "http://79.165.94.220:45052/i", "host": "79.165.94.220", "host_ip": "79.165.94.220", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 09:47:14 UTC", "discovered_at": "2026-10-02T09:47:14.000Z" }, { "id": 148713, "urlhaus_id": "3926810", "url": "http://112.225.78.108:53589/bin.sh", "host": "112.225.78.108", "host_ip": "112.225.78.108", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 09:32:34 UTC", "discovered_at": "2026-10-02T09:32:34.000Z" }, { "id": 148714, "urlhaus_id": "3926809", "url": "https://pixeldrain.com/api/file/UNcsXkRT", "host": "pixeldrain.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 09:25:21 UTC", "discovered_at": "2026-10-02T09:25:21.000Z" }, { "id": 148716, "urlhaus_id": "3926808", "url": "http://115.57.234.59:57586/i", "host": "115.57.234.59", "host_ip": "115.57.234.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 09:16:17 UTC", "discovered_at": "2026-10-02T09:16:17.000Z" }, { "id": 148715, "urlhaus_id": "3926807", "url": "http://115.57.234.59:57586/bin.sh", "host": "115.57.234.59", "host_ip": "115.57.234.59", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 09:16:17 UTC", "discovered_at": "2026-10-02T09:16:17.000Z" }, { "id": 148717, "urlhaus_id": "3926806", "url": "http://42.235.44.190:41710/bin.sh", "host": "42.235.44.190", "host_ip": "42.235.44.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 09:16:16 UTC", "discovered_at": "2026-10-02T09:16:16.000Z" }, { "id": 148719, "urlhaus_id": "3926805", "url": "http://27.150.252.7:39073/i", "host": "27.150.252.7", "host_ip": "27.150.252.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 09:02:13 UTC", "discovered_at": "2026-10-02T09:02:13.000Z" }, { "id": 148718, "urlhaus_id": "3926804", "url": "http://154.223.128.222:41756/i", "host": "154.223.128.222", "host_ip": "154.223.128.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 09:02:13 UTC", "discovered_at": "2026-10-02T09:02:13.000Z" }, { "id": 148721, "urlhaus_id": "3926803", "url": "http://117.131.92.150:36075/bin.sh", "host": "117.131.92.150", "host_ip": "117.131.92.150", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 09:02:12 UTC", "discovered_at": "2026-10-02T09:02:12.000Z" }, { "id": 148720, "urlhaus_id": "3926802", "url": "http://105.186.111.168:49221/i", "host": "105.186.111.168", "host_ip": "105.186.111.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 09:02:12 UTC", "discovered_at": "2026-10-02T09:02:12.000Z" }, { "id": 148722, "urlhaus_id": "3926801", "url": "http://119.116.36.24:50141/bin.sh", "host": "119.116.36.24", "host_ip": "119.116.36.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 08:47:24 UTC", "discovered_at": "2026-10-02T08:47:24.000Z" }, { "id": 148724, "urlhaus_id": "3926800", "url": "http://170.84.133.235:54607/i", "host": "170.84.133.235", "host_ip": "170.84.133.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:46:15 UTC", "discovered_at": "2026-10-02T08:46:15.000Z" }, { "id": 148723, "urlhaus_id": "3926799", "url": "http://170.84.133.235:54607/bin.sh", "host": "170.84.133.235", "host_ip": "170.84.133.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:46:15 UTC", "discovered_at": "2026-10-02T08:46:15.000Z" }, { "id": 148725, "urlhaus_id": "3926798", "url": "http://123.12.87.29:33616/i", "host": "123.12.87.29", "host_ip": "123.12.87.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 08:32:11 UTC", "discovered_at": "2026-10-02T08:32:11.000Z" }, { "id": 148727, "urlhaus_id": "3926797", "url": "http://130.12.209.166:33401/i", "host": "130.12.209.166", "host_ip": "130.12.209.166", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:31:19 UTC", "discovered_at": "2026-10-02T08:31:19.000Z" }, { "id": 148726, "urlhaus_id": "3926796", "url": "http://193.163.187.224:41355/i", "host": "193.163.187.224", "host_ip": "193.163.187.224", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:31:19 UTC", "discovered_at": "2026-10-02T08:31:19.000Z" }, { "id": 148728, "urlhaus_id": "3926795", "url": "http://115.55.143.235:60801/bin.sh", "host": "115.55.143.235", "host_ip": "115.55.143.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 08:31:18 UTC", "discovered_at": "2026-10-02T08:31:18.000Z" }, { "id": 148729, "urlhaus_id": "3926794", "url": "http://196.189.101.82:50620/i", "host": "196.189.101.82", "host_ip": "196.189.101.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:17:11 UTC", "discovered_at": "2026-10-02T08:17:11.000Z" }, { "id": 148730, "urlhaus_id": "3926793", "url": "http://182.240.202.183:56323/i", "host": "182.240.202.183", "host_ip": "182.240.202.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:16:56 UTC", "discovered_at": "2026-10-02T08:16:56.000Z" }, { "id": 148731, "urlhaus_id": "3926792", "url": "http://120.28.252.64:41657/i", "host": "120.28.252.64", "host_ip": "120.28.252.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:16:37 UTC", "discovered_at": "2026-10-02T08:16:37.000Z" }, { "id": 148732, "urlhaus_id": "3926791", "url": "http://123.11.36.82:53208/i", "host": "123.11.36.82", "host_ip": "123.11.36.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 08:16:14 UTC", "discovered_at": "2026-10-02T08:16:14.000Z" }, { "id": 148733, "urlhaus_id": "3926790", "url": "http://36.26.150.10:52899/i", "host": "36.26.150.10", "host_ip": "36.26.150.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:02:14 UTC", "discovered_at": "2026-10-02T08:02:14.000Z" }, { "id": 148734, "urlhaus_id": "3926789", "url": "http://123.12.87.29:33616/bin.sh", "host": "123.12.87.29", "host_ip": "123.12.87.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 08:02:13 UTC", "discovered_at": "2026-10-02T08:02:13.000Z" }, { "id": 148735, "urlhaus_id": "3926788", "url": "http://112.245.78.173:36767/i", "host": "112.245.78.173", "host_ip": "112.245.78.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 08:02:12 UTC", "discovered_at": "2026-10-02T08:02:12.000Z" }, { "id": 148736, "urlhaus_id": "3926787", "url": "http://36.26.150.10:52899/bin.sh", "host": "36.26.150.10", "host_ip": "36.26.150.10", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:47:27 UTC", "discovered_at": "2026-10-02T07:47:27.000Z" }, { "id": 148737, "urlhaus_id": "3926786", "url": "http://120.28.252.64:41657/bin.sh", "host": "120.28.252.64", "host_ip": "120.28.252.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:47:15 UTC", "discovered_at": "2026-10-02T07:47:15.000Z" }, { "id": 148738, "urlhaus_id": "3926785", "url": "http://27.152.53.206:34777/bin.sh", "host": "27.152.53.206", "host_ip": "27.152.53.206", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:47:14 UTC", "discovered_at": "2026-10-02T07:47:14.000Z" }, { "id": 148739, "urlhaus_id": "3926784", "url": "http://41.216.226.164:51974/i", "host": "41.216.226.164", "host_ip": "41.216.226.164", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 07:47:13 UTC", "discovered_at": "2026-10-02T07:47:13.000Z" }, { "id": 148742, "urlhaus_id": "3926783", "url": "http://179.49.213.85:40059/i", "host": "179.49.213.85", "host_ip": "179.49.213.85", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:47:12 UTC", "discovered_at": "2026-10-02T07:47:12.000Z" }, { "id": 148741, "urlhaus_id": "3926782", "url": "http://178.176.107.122:50630/i", "host": "178.176.107.122", "host_ip": "178.176.107.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 07:47:12 UTC", "discovered_at": "2026-10-02T07:47:12.000Z" }, { "id": 148740, "urlhaus_id": "3926781", "url": "http://182.127.123.209:36544/bin.sh", "host": "182.127.123.209", "host_ip": "182.127.123.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 07:47:12 UTC", "discovered_at": "2026-10-02T07:47:12.000Z" }, { "id": 148743, "urlhaus_id": "3926780", "url": "http://103.31.103.204:55084/bin.sh", "host": "103.31.103.204", "host_ip": "103.31.103.204", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 07:41:17 UTC", "discovered_at": "2026-10-02T07:41:17.000Z" }, { "id": 148744, "urlhaus_id": "3926779", "url": "http://182.127.160.130:34533/i", "host": "182.127.160.130", "host_ip": "182.127.160.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 07:32:15 UTC", "discovered_at": "2026-10-02T07:32:15.000Z" }, { "id": 148746, "urlhaus_id": "3926778", "url": "http://182.119.0.102:50824/i", "host": "182.119.0.102", "host_ip": "182.119.0.102", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 07:32:13 UTC", "discovered_at": "2026-10-02T07:32:13.000Z" }, { "id": 148745, "urlhaus_id": "3926777", "url": "http://112.245.78.173:36767/bin.sh", "host": "112.245.78.173", "host_ip": "112.245.78.173", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:32:13 UTC", "discovered_at": "2026-10-02T07:32:13.000Z" }, { "id": 148749, "urlhaus_id": "3926776", "url": "http://181.79.85.94:4562/i", "host": "181.79.85.94", "host_ip": "181.79.85.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 07:16:14 UTC", "discovered_at": "2026-10-02T07:16:14.000Z" }, { "id": 148748, "urlhaus_id": "3926775", "url": "http://115.50.22.252:51347/i", "host": "115.50.22.252", "host_ip": "115.50.22.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:16:14 UTC", "discovered_at": "2026-10-02T07:16:14.000Z" }, { "id": 148747, "urlhaus_id": "3926774", "url": "http://112.248.161.201:45159/bin.sh", "host": "112.248.161.201", "host_ip": "112.248.161.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 07:16:14 UTC", "discovered_at": "2026-10-02T07:16:14.000Z" }, { "id": 148750, "urlhaus_id": "3926773", "url": "http://190.92.96.7:39887/bin.sh", "host": "190.92.96.7", "host_ip": "190.92.96.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:02:13 UTC", "discovered_at": "2026-10-02T07:02:13.000Z" }, { "id": 148751, "urlhaus_id": "3926772", "url": "http://196.190.105.170:60281/bin.sh", "host": "196.190.105.170", "host_ip": "196.190.105.170", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 07:02:11 UTC", "discovered_at": "2026-10-02T07:02:11.000Z" }, { "id": 148752, "urlhaus_id": "3926771", "url": "http://115.50.22.252:51347/bin.sh", "host": "115.50.22.252", "host_ip": "115.50.22.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 06:58:16 UTC", "discovered_at": "2026-10-02T06:58:16.000Z" }, { "id": 148753, "urlhaus_id": "3926770", "url": "https://ik.imagekit.io/k1gn1jh9t/dIhimbS.txt", "host": "ik.imagekit.io", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "rev-base64-loader, xworm", "last_online": null, "first_seen": "2026-10-02 06:48:14 UTC", "discovered_at": "2026-10-02T06:48:14.000Z" }, { "id": 148754, "urlhaus_id": "3926769", "url": "https://pub-e33c72ad3ac74028914da0187313eeb3.r2.dev/NetWorxPro_signed.msi", "host": "pub-e33c72ad3ac74028914da0187313eeb3.r2.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "Arechclient2, msi", "last_online": null, "first_seen": "2026-10-02 06:48:13 UTC", "discovered_at": "2026-10-02T06:48:13.000Z" }, { "id": 148755, "urlhaus_id": "3926768", "url": "http://60.188.197.62:41585/i", "host": "60.188.197.62", "host_ip": "60.188.197.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 06:47:12 UTC", "discovered_at": "2026-10-02T06:47:12.000Z" }, { "id": 148758, "urlhaus_id": "3926767", "url": "http://59.96.141.130:41429/i", "host": "59.96.141.130", "host_ip": "59.96.141.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 06:47:09 UTC", "discovered_at": "2026-10-02T06:47:09.000Z" }, { "id": 148757, "urlhaus_id": "3926766", "url": "http://182.117.69.141:39508/i", "host": "182.117.69.141", "host_ip": "182.117.69.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 06:47:09 UTC", "discovered_at": "2026-10-02T06:47:09.000Z" }, { "id": 148756, "urlhaus_id": "3926765", "url": "http://178.176.107.122:50630/bin.sh", "host": "178.176.107.122", "host_ip": "178.176.107.122", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 06:47:09 UTC", "discovered_at": "2026-10-02T06:47:09.000Z" }, { "id": 148760, "urlhaus_id": "3926764", "url": "http://107.172.235.223/60/wegivenbestthings.js", "host": "107.172.235.223", "host_ip": "107.172.235.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, js, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-02 06:45:14 UTC", "discovered_at": "2026-10-02T06:45:14.000Z" }, { "id": 148759, "urlhaus_id": "3926763", "url": "http://107.172.235.223/60/img_205615.png", "host": "107.172.235.223", "host_ip": "107.172.235.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-02 06:45:14 UTC", "discovered_at": "2026-10-02T06:45:14.000Z" }, { "id": 148761, "urlhaus_id": "3926762", "url": "http://107.172.235.223/60/hhn.hta", "host": "107.172.235.223", "host_ip": "107.172.235.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": "hta, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-02 06:45:13 UTC", "discovered_at": "2026-10-02T06:45:13.000Z" }, { "id": 148762, "urlhaus_id": "3926761", "url": "http://123.14.56.200:53073/i", "host": "123.14.56.200", "host_ip": "123.14.56.200", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 06:38:31 UTC", "discovered_at": "2026-10-02T06:38:31.000Z" }, { "id": 148763, "urlhaus_id": "3926760", "url": "https://chrome.browserdownloads.ru/downloads/ru/YChromeSetup.exe", "host": "chrome.browserdownloads.ru", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe", "last_online": null, "first_seen": "2026-10-02 06:36:58 UTC", "discovered_at": "2026-10-02T06:36:58.000Z" }, { "id": 148764, "urlhaus_id": "3926759", "url": "http://195.178.110.48:8099/xmrig-x64.tar.gz", "host": "195.178.110.48", "host_ip": "195.178.110.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, elf, redis, xmrig", "last_online": null, "first_seen": "2026-10-02 06:36:41 UTC", "discovered_at": "2026-10-02T06:36:41.000Z" }, { "id": 148765, "urlhaus_id": "3926758", "url": "http://216.126.86.82:60213/Mozi.m", "host": "216.126.86.82", "host_ip": "216.126.86.82", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 06:36:37 UTC", "discovered_at": "2026-10-02T06:36:37.000Z" }, { "id": 148767, "urlhaus_id": "3926757", "url": "https://pomorutecvo.vercel.app/?download=1", "host": "pomorutecvo.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk, mamont", "last_online": null, "first_seen": "2026-10-02 06:36:24 UTC", "discovered_at": "2026-10-02T06:36:24.000Z" }, { "id": 148766, "urlhaus_id": "3926756", "url": "https://polksvo.vercel.app/?download=1", "host": "polksvo.vercel.app", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "apk, mamont", "last_online": null, "first_seen": "2026-10-02 06:36:24 UTC", "discovered_at": "2026-10-02T06:36:24.000Z" }, { "id": 148770, "urlhaus_id": "3926755", "url": "https://tmpfiles.org/dl/1790921964.cc1fb986876287ec/w6Aney6JrUq8/nanocore.js", "host": "tmpfiles.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, js, malware", "last_online": null, "first_seen": "2026-10-02 06:36:22 UTC", "discovered_at": "2026-10-02T06:36:22.000Z" }, { "id": 148769, "urlhaus_id": "3926754", "url": "https://tmpfiles.org/dl/1790921720.87bd996efc2584f6/wGAdep6P9UOc/nanocore.exe", "host": "tmpfiles.org", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AsyncRAT, exe", "last_online": null, "first_seen": "2026-10-02 06:36:22 UTC", "discovered_at": "2026-10-02T06:36:22.000Z" }, { "id": 148768, "urlhaus_id": "3926753", "url": "http://45.198.224.34/bb", "host": "45.198.224.34", "host_ip": "45.198.224.34", "url_status": "online", "online": true, "threat": "malware_download", "tags": "cowrie, honeypot", "last_online": null, "first_seen": "2026-10-02 06:36:22 UTC", "discovered_at": "2026-10-02T06:36:22.000Z" }, { "id": 148772, "urlhaus_id": "3926752", "url": "https://stratos-delta.com/f/ujkfbdvkl5i2ezacchx7ia/6b4aghms", "host": "stratos-delta.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS", "last_online": null, "first_seen": "2026-10-02 06:36:21 UTC", "discovered_at": "2026-10-02T06:36:21.000Z" }, { "id": 148771, "urlhaus_id": "3926751", "url": "http://165.22.18.19:8889/gh0st148", "host": "165.22.18.19", "host_ip": "165.22.18.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "beacon, redis", "last_online": null, "first_seen": "2026-10-02 06:36:21 UTC", "discovered_at": "2026-10-02T06:36:21.000Z" }, { "id": 148773, "urlhaus_id": "3926750", "url": "https://raw.githubusercontent.com/niehgns/clients/main/goobaclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:43 UTC", "discovered_at": "2026-10-02T06:35:43.000Z" }, { "id": 148776, "urlhaus_id": "3926749", "url": "https://downloader.exeexe.workers.dev/u4i7o1", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "PythonStealer, shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:42 UTC", "discovered_at": "2026-10-02T06:35:42.000Z" }, { "id": 148775, "urlhaus_id": "3926748", "url": "https://downloader.exeexe.workers.dev/a1b2c3", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:42 UTC", "discovered_at": "2026-10-02T06:35:42.000Z" }, { "id": 148774, "urlhaus_id": "3926747", "url": "https://raw.githubusercontent.com/niehgns/clients1/main/zyronclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:42 UTC", "discovered_at": "2026-10-02T06:35:42.000Z" }, { "id": 148777, "urlhaus_id": "3926746", "url": "https://downloader.exeexe.workers.dev/n7m3q6", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:41 UTC", "discovered_at": "2026-10-02T06:35:41.000Z" }, { "id": 148778, "urlhaus_id": "3926745", "url": "https://downloader.exeexe.workers.dev/r2t5y8", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:40 UTC", "discovered_at": "2026-10-02T06:35:40.000Z" }, { "id": 148779, "urlhaus_id": "3926744", "url": "http://59.96.140.80:52685/Mozi.m", "host": "59.96.140.80", "host_ip": "59.96.140.80", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, iot, Mozi", "last_online": null, "first_seen": "2026-10-02 06:35:36 UTC", "discovered_at": "2026-10-02T06:35:36.000Z" }, { "id": 148780, "urlhaus_id": "3926743", "url": "https://raw.githubusercontent.com/niehgns/clients2/main/67client-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:33 UTC", "discovered_at": "2026-10-02T06:35:33.000Z" }, { "id": 148783, "urlhaus_id": "3926742", "url": "https://downloader.exeexe.workers.dev/z8y7w6", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:32 UTC", "discovered_at": "2026-10-02T06:35:32.000Z" }, { "id": 148782, "urlhaus_id": "3926741", "url": "https://downloader.exeexe.workers.dev/q7w8e9", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:32 UTC", "discovered_at": "2026-10-02T06:35:32.000Z" }, { "id": 148781, "urlhaus_id": "3926740", "url": "https://downloader.exeexe.workers.dev/l8z2x5", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:32 UTC", "discovered_at": "2026-10-02T06:35:32.000Z" }, { "id": 148785, "urlhaus_id": "3926739", "url": "https://downloader.exeexe.workers.dev/h1j4k7", "host": "downloader.exeexe.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "shadowproject, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:30 UTC", "discovered_at": "2026-10-02T06:35:30.000Z" }, { "id": 148784, "urlhaus_id": "3926738", "url": "https://raw.githubusercontent.com/niehgns/clients2/main/kryptonclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:30 UTC", "discovered_at": "2026-10-02T06:35:30.000Z" }, { "id": 148786, "urlhaus_id": "3926737", "url": "https://raw.githubusercontent.com/niehgns/clients2/main/4eclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:29 UTC", "discovered_at": "2026-10-02T06:35:29.000Z" }, { "id": 148787, "urlhaus_id": "3926736", "url": "http://42.238.248.174:47417/Mozi.m", "host": "42.238.248.174", "host_ip": "42.238.248.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "42-238-248-174, cowrie, elf, honeypot, Mozi", "last_online": null, "first_seen": "2026-10-02 06:35:28 UTC", "discovered_at": "2026-10-02T06:35:28.000Z" }, { "id": 148790, "urlhaus_id": "3926735", "url": "https://raw.githubusercontent.com/niehgns/clients2/main/frostclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:27 UTC", "discovered_at": "2026-10-02T06:35:27.000Z" }, { "id": 148789, "urlhaus_id": "3926734", "url": "https://raw.githubusercontent.com/niehgns/clients2/main/xenonclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:27 UTC", "discovered_at": "2026-10-02T06:35:27.000Z" }, { "id": 148788, "urlhaus_id": "3926733", "url": "https://raw.githubusercontent.com/niehgns/clients2/main/radiumclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:27 UTC", "discovered_at": "2026-10-02T06:35:27.000Z" }, { "id": 148791, "urlhaus_id": "3926732", "url": "https://raw.githubusercontent.com/niehgns/clients1/main/dqrkisclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:23 UTC", "discovered_at": "2026-10-02T06:35:23.000Z" }, { "id": 148793, "urlhaus_id": "3926731", "url": "https://prestige-client.live/downloads/PrestigeSetup_pw1337.zip", "host": "prestige-client.live", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "rustystealer", "last_online": null, "first_seen": "2026-10-02 06:35:18 UTC", "discovered_at": "2026-10-02T06:35:18.000Z" }, { "id": 148792, "urlhaus_id": "3926730", "url": "https://raw.githubusercontent.com/niehgns/clients/main/fakepayclient-1.21.11.jar", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "jar, minecraft, MittkeeDropper, SilentNet, stealer", "last_online": null, "first_seen": "2026-10-02 06:35:18 UTC", "discovered_at": "2026-10-02T06:35:18.000Z" }, { "id": 148799, "urlhaus_id": "3926729", "url": "http://185.213.240.64/1.sh", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai, script", "last_online": null, "first_seen": "2026-10-02 06:35:12 UTC", "discovered_at": "2026-10-02T06:35:12.000Z" }, { "id": 148798, "urlhaus_id": "3926728", "url": "http://185.213.240.64/hiddenbin/Space.x86_64", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai, wraith", "last_online": null, "first_seen": "2026-10-02 06:35:12 UTC", "discovered_at": "2026-10-02T06:35:12.000Z" }, { "id": 148797, "urlhaus_id": "3926727", "url": "http://185.213.240.64/hiddenbin/Space.i686", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai, wraith", "last_online": null, "first_seen": "2026-10-02 06:35:12 UTC", "discovered_at": "2026-10-02T06:35:12.000Z" }, { "id": 148796, "urlhaus_id": "3926726", "url": "http://185.213.240.64/hiddenbin/Space.arc", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai, wraith", "last_online": null, "first_seen": "2026-10-02 06:35:12 UTC", "discovered_at": "2026-10-02T06:35:12.000Z" }, { "id": 148795, "urlhaus_id": "3926725", "url": "http://185.213.240.64/hiddenbin/Space.x86", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai, wraith", "last_online": null, "first_seen": "2026-10-02 06:35:12 UTC", "discovered_at": "2026-10-02T06:35:12.000Z" }, { "id": 148794, "urlhaus_id": "3926724", "url": "https://stratos-delta.com/curl/925zai5h/ygpst74xbzykss9mw.dat", "host": "stratos-delta.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Foxveil, macOS", "last_online": null, "first_seen": "2026-10-02 06:35:12 UTC", "discovered_at": "2026-10-02T06:35:12.000Z" }, { "id": 148800, "urlhaus_id": "3926723", "url": "http://91.92.242.236/files-129312398/files/file_90d99a8ae6973888.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-02 06:35:11 UTC", "discovered_at": "2026-10-02T06:35:11.000Z" }, { "id": 148802, "urlhaus_id": "3926722", "url": "http://59.96.141.130:41429/bin.sh", "host": "59.96.141.130", "host_ip": "59.96.141.130", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 06:31:18 UTC", "discovered_at": "2026-10-02T06:31:18.000Z" }, { "id": 148801, "urlhaus_id": "3926721", "url": "http://113.221.96.223:34810/bin.sh", "host": "113.221.96.223", "host_ip": "113.221.96.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 06:31:18 UTC", "discovered_at": "2026-10-02T06:31:18.000Z" }, { "id": 148805, "urlhaus_id": "3926720", "url": "http://27.215.212.68:56602/i", "host": "27.215.212.68", "host_ip": "27.215.212.68", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 06:31:17 UTC", "discovered_at": "2026-10-02T06:31:17.000Z" }, { "id": 148804, "urlhaus_id": "3926719", "url": "http://115.49.209.223:59964/bin.sh", "host": "115.49.209.223", "host_ip": "115.49.209.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 06:31:17 UTC", "discovered_at": "2026-10-02T06:31:17.000Z" }, { "id": 148803, "urlhaus_id": "3926718", "url": "http://222.141.105.132:54124/bin.sh", "host": "222.141.105.132", "host_ip": "222.141.105.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 06:31:17 UTC", "discovered_at": "2026-10-02T06:31:17.000Z" }, { "id": 148806, "urlhaus_id": "3926717", "url": "http://182.117.69.141:39508/bin.sh", "host": "182.117.69.141", "host_ip": "182.117.69.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 06:31:16 UTC", "discovered_at": "2026-10-02T06:31:16.000Z" }, { "id": 148807, "urlhaus_id": "3926716", "url": "http://222.127.76.16:41262/i", "host": "222.127.76.16", "host_ip": "222.127.76.16", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 06:17:13 UTC", "discovered_at": "2026-10-02T06:17:13.000Z" }, { "id": 148808, "urlhaus_id": "3926715", "url": "http://105.224.242.90:47973/bin.sh", "host": "105.224.242.90", "host_ip": "105.224.242.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 06:16:22 UTC", "discovered_at": "2026-10-02T06:16:22.000Z" }, { "id": 148809, "urlhaus_id": "3926714", "url": "http://5.11.180.251:35561/i", "host": "5.11.180.251", "host_ip": "5.11.180.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 06:02:16 UTC", "discovered_at": "2026-10-02T06:02:16.000Z" }, { "id": 148813, "urlhaus_id": "3926713", "url": "http://61.179.88.81:59819/bin.sh", "host": "61.179.88.81", "host_ip": "61.179.88.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 06:02:13 UTC", "discovered_at": "2026-10-02T06:02:13.000Z" }, { "id": 148812, "urlhaus_id": "3926712", "url": "http://42.56.204.252:48363/bin.sh", "host": "42.56.204.252", "host_ip": "42.56.204.252", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 06:02:13 UTC", "discovered_at": "2026-10-02T06:02:13.000Z" }, { "id": 148811, "urlhaus_id": "3926711", "url": "http://61.52.185.101:48782/bin.sh", "host": "61.52.185.101", "host_ip": "61.52.185.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 06:02:13 UTC", "discovered_at": "2026-10-02T06:02:13.000Z" }, { "id": 148810, "urlhaus_id": "3926710", "url": "http://42.229.223.43:58467/i", "host": "42.229.223.43", "host_ip": "42.229.223.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 06:02:13 UTC", "discovered_at": "2026-10-02T06:02:13.000Z" }, { "id": 148815, "urlhaus_id": "3926709", "url": "http://185.213.240.64/hiddenbin/Space.arm7", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:25 UTC", "discovered_at": "2026-10-02T05:55:25.000Z" }, { "id": 148814, "urlhaus_id": "3926708", "url": "http://185.213.240.64/hiddenbin/Space.ppc", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:25 UTC", "discovered_at": "2026-10-02T05:55:25.000Z" }, { "id": 148820, "urlhaus_id": "3926707", "url": "http://185.213.240.64/hiddenbin/Space.arm", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:24 UTC", "discovered_at": "2026-10-02T05:55:24.000Z" }, { "id": 148819, "urlhaus_id": "3926706", "url": "http://185.213.240.64/hiddenbin/Space.mips", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:24 UTC", "discovered_at": "2026-10-02T05:55:24.000Z" }, { "id": 148818, "urlhaus_id": "3926705", "url": "http://185.213.240.64/hiddenbin/Space.arm6", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:24 UTC", "discovered_at": "2026-10-02T05:55:24.000Z" }, { "id": 148817, "urlhaus_id": "3926704", "url": "http://185.213.240.64/hiddenbin/Space.sh4", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:24 UTC", "discovered_at": "2026-10-02T05:55:24.000Z" }, { "id": 148816, "urlhaus_id": "3926703", "url": "http://185.213.240.64/hiddenbin/Space.arm5", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:24 UTC", "discovered_at": "2026-10-02T05:55:24.000Z" }, { "id": 148823, "urlhaus_id": "3926702", "url": "http://185.213.240.64/hiddenbin/Space.mpsl", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:23 UTC", "discovered_at": "2026-10-02T05:55:23.000Z" }, { "id": 148822, "urlhaus_id": "3926701", "url": "http://185.213.240.64/hiddenbin/Space.mips64", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:23 UTC", "discovered_at": "2026-10-02T05:55:23.000Z" }, { "id": 148821, "urlhaus_id": "3926700", "url": "http://185.213.240.64/hiddenbin/Space.sparc", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:23 UTC", "discovered_at": "2026-10-02T05:55:23.000Z" }, { "id": 148824, "urlhaus_id": "3926699", "url": "http://185.213.240.64/hiddenbin/Space.m68k", "host": "185.213.240.64", "host_ip": "185.213.240.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-02 05:55:22 UTC", "discovered_at": "2026-10-02T05:55:22.000Z" }, { "id": 148826, "urlhaus_id": "3926698", "url": "http://101.59.79.119:43520/i", "host": "101.59.79.119", "host_ip": "101.59.79.119", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 05:47:12 UTC", "discovered_at": "2026-10-02T05:47:12.000Z" }, { "id": 148825, "urlhaus_id": "3926697", "url": "http://123.12.97.73:54508/bin.sh", "host": "123.12.97.73", "host_ip": "123.12.97.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 05:47:12 UTC", "discovered_at": "2026-10-02T05:47:12.000Z" }, { "id": 148827, "urlhaus_id": "3926696", "url": "http://36.77.229.236:53632/i", "host": "36.77.229.236", "host_ip": "36.77.229.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 05:46:25 UTC", "discovered_at": "2026-10-02T05:46:25.000Z" }, { "id": 148828, "urlhaus_id": "3926695", "url": "http://59.180.145.247:55956/i", "host": "59.180.145.247", "host_ip": "59.180.145.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 05:38:47 UTC", "discovered_at": "2026-10-02T05:38:47.000Z" }, { "id": 148829, "urlhaus_id": "3926694", "url": "http://114.228.123.114:51491/i", "host": "114.228.123.114", "host_ip": "114.228.123.114", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 05:32:13 UTC", "discovered_at": "2026-10-02T05:32:13.000Z" }, { "id": 148832, "urlhaus_id": "3926693", "url": "http://105.224.5.162:42637/bin.sh", "host": "105.224.5.162", "host_ip": "105.224.5.162", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 05:32:12 UTC", "discovered_at": "2026-10-02T05:32:12.000Z" }, { "id": 148831, "urlhaus_id": "3926692", "url": "http://61.53.120.245:34134/i", "host": "61.53.120.245", "host_ip": "61.53.120.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 05:32:12 UTC", "discovered_at": "2026-10-02T05:32:12.000Z" }, { "id": 148830, "urlhaus_id": "3926691", "url": "http://119.116.33.203:58231/i", "host": "119.116.33.203", "host_ip": "119.116.33.203", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 05:32:12 UTC", "discovered_at": "2026-10-02T05:32:12.000Z" }, { "id": 148833, "urlhaus_id": "3926690", "url": "http://31.4.254.241:49417/bin.sh", "host": "31.4.254.241", "host_ip": "31.4.254.241", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 05:17:27 UTC", "discovered_at": "2026-10-02T05:17:27.000Z" }, { "id": 148835, "urlhaus_id": "3926689", "url": "http://42.237.63.135:43965/i", "host": "42.237.63.135", "host_ip": "42.237.63.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 05:17:13 UTC", "discovered_at": "2026-10-02T05:17:13.000Z" }, { "id": 148834, "urlhaus_id": "3926688", "url": "http://117.131.92.150:36075/i", "host": "117.131.92.150", "host_ip": "117.131.92.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 05:17:13 UTC", "discovered_at": "2026-10-02T05:17:13.000Z" }, { "id": 148837, "urlhaus_id": "3926687", "url": "http://210.97.100.192:58715/i", "host": "210.97.100.192", "host_ip": "210.97.100.192", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 05:17:12 UTC", "discovered_at": "2026-10-02T05:17:12.000Z" }, { "id": 148836, "urlhaus_id": "3926686", "url": "http://115.50.7.28:59792/bin.sh", "host": "115.50.7.28", "host_ip": "115.50.7.28", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 05:17:12 UTC", "discovered_at": "2026-10-02T05:17:12.000Z" }, { "id": 148838, "urlhaus_id": "3926685", "url": "http://182.122.242.126:59890/i", "host": "182.122.242.126", "host_ip": "182.122.242.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 05:02:11 UTC", "discovered_at": "2026-10-02T05:02:11.000Z" }, { "id": 148839, "urlhaus_id": "3926684", "url": "http://182.122.110.235:45263/i", "host": "182.122.110.235", "host_ip": "182.122.110.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 04:47:27 UTC", "discovered_at": "2026-10-02T04:47:27.000Z" }, { "id": 148840, "urlhaus_id": "3926683", "url": "http://125.46.196.22:49028/i", "host": "125.46.196.22", "host_ip": "125.46.196.22", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 04:32:13 UTC", "discovered_at": "2026-10-02T04:32:13.000Z" }, { "id": 148841, "urlhaus_id": "3926682", "url": "http://182.113.37.203:57732/bin.sh", "host": "182.113.37.203", "host_ip": "182.113.37.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 04:32:12 UTC", "discovered_at": "2026-10-02T04:32:12.000Z" }, { "id": 148842, "urlhaus_id": "3926681", "url": "http://190.92.96.7:39887/i", "host": "190.92.96.7", "host_ip": "190.92.96.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 04:31:16 UTC", "discovered_at": "2026-10-02T04:31:16.000Z" }, { "id": 148846, "urlhaus_id": "3926680", "url": "http://123.189.141.223:40664/bin.sh", "host": "123.189.141.223", "host_ip": "123.189.141.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 04:31:14 UTC", "discovered_at": "2026-10-02T04:31:14.000Z" }, { "id": 148845, "urlhaus_id": "3926679", "url": "http://115.58.86.96:52093/i", "host": "115.58.86.96", "host_ip": "115.58.86.96", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 04:31:14 UTC", "discovered_at": "2026-10-02T04:31:14.000Z" }, { "id": 148844, "urlhaus_id": "3926678", "url": "http://123.189.141.223:40664/i", "host": "123.189.141.223", "host_ip": "123.189.141.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 04:31:14 UTC", "discovered_at": "2026-10-02T04:31:14.000Z" }, { "id": 148843, "urlhaus_id": "3926677", "url": "http://219.156.119.126:37129/i", "host": "219.156.119.126", "host_ip": "219.156.119.126", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 04:31:14 UTC", "discovered_at": "2026-10-02T04:31:14.000Z" }, { "id": 148849, "urlhaus_id": "3926676", "url": "http://182.119.126.236:39384/bin.sh", "host": "182.119.126.236", "host_ip": "182.119.126.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 04:17:14 UTC", "discovered_at": "2026-10-02T04:17:14.000Z" }, { "id": 148848, "urlhaus_id": "3926675", "url": "http://182.119.126.236:39384/i", "host": "182.119.126.236", "host_ip": "182.119.126.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 04:17:14 UTC", "discovered_at": "2026-10-02T04:17:14.000Z" }, { "id": 148847, "urlhaus_id": "3926674", "url": "http://222.141.105.132:54124/i", "host": "222.141.105.132", "host_ip": "222.141.105.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 04:17:14 UTC", "discovered_at": "2026-10-02T04:17:14.000Z" }, { "id": 148850, "urlhaus_id": "3926673", "url": "http://182.119.58.161:53866/bin.sh", "host": "182.119.58.161", "host_ip": "182.119.58.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 04:17:13 UTC", "discovered_at": "2026-10-02T04:17:13.000Z" }, { "id": 148851, "urlhaus_id": "3926672", "url": "http://218.61.103.229:44959/bin.sh", "host": "218.61.103.229", "host_ip": "218.61.103.229", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 04:02:24 UTC", "discovered_at": "2026-10-02T04:02:24.000Z" }, { "id": 148854, "urlhaus_id": "3926671", "url": "http://120.28.200.35:33570/i", "host": "120.28.200.35", "host_ip": "120.28.200.35", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 04:02:11 UTC", "discovered_at": "2026-10-02T04:02:11.000Z" }, { "id": 148853, "urlhaus_id": "3926670", "url": "http://115.52.237.97:37931/i", "host": "115.52.237.97", "host_ip": "115.52.237.97", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 04:02:11 UTC", "discovered_at": "2026-10-02T04:02:11.000Z" }, { "id": 148852, "urlhaus_id": "3926669", "url": "http://125.45.137.39:43385/bin.sh", "host": "125.45.137.39", "host_ip": "125.45.137.39", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 04:02:11 UTC", "discovered_at": "2026-10-02T04:02:11.000Z" }, { "id": 148855, "urlhaus_id": "3926668", "url": "http://115.56.156.34:42802/bin.sh", "host": "115.56.156.34", "host_ip": "115.56.156.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 04:02:10 UTC", "discovered_at": "2026-10-02T04:02:10.000Z" }, { "id": 148856, "urlhaus_id": "3926667", "url": "http://176.77.46.141:53458/i", "host": "176.77.46.141", "host_ip": "176.77.46.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 04:01:26 UTC", "discovered_at": "2026-10-02T04:01:26.000Z" }, { "id": 148857, "urlhaus_id": "3926666", "url": "http://196.191.233.24:59831/i", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 03:47:24 UTC", "discovered_at": "2026-10-02T03:47:24.000Z" }, { "id": 148861, "urlhaus_id": "3926665", "url": "http://182.112.31.29:60594/i", "host": "182.112.31.29", "host_ip": "182.112.31.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 03:47:12 UTC", "discovered_at": "2026-10-02T03:47:12.000Z" }, { "id": 148860, "urlhaus_id": "3926664", "url": "http://1.61.216.113:46379/i", "host": "1.61.216.113", "host_ip": "1.61.216.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 03:47:12 UTC", "discovered_at": "2026-10-02T03:47:12.000Z" }, { "id": 148859, "urlhaus_id": "3926663", "url": "http://42.86.54.109:43824/i", "host": "42.86.54.109", "host_ip": "42.86.54.109", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 03:47:12 UTC", "discovered_at": "2026-10-02T03:47:12.000Z" }, { "id": 148858, "urlhaus_id": "3926662", "url": "http://105.225.107.62:47773/i", "host": "105.225.107.62", "host_ip": "105.225.107.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 03:47:12 UTC", "discovered_at": "2026-10-02T03:47:12.000Z" }, { "id": 148862, "urlhaus_id": "3926661", "url": "http://36.69.82.105:52929/i", "host": "36.69.82.105", "host_ip": "36.69.82.105", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 03:32:24 UTC", "discovered_at": "2026-10-02T03:32:24.000Z" }, { "id": 148863, "urlhaus_id": "3926660", "url": "http://176.77.46.141:53458/bin.sh", "host": "176.77.46.141", "host_ip": "176.77.46.141", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 03:32:20 UTC", "discovered_at": "2026-10-02T03:32:20.000Z" }, { "id": 148867, "urlhaus_id": "3926659", "url": "http://125.24.163.158:43947/i", "host": "125.24.163.158", "host_ip": "125.24.163.158", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 03:32:14 UTC", "discovered_at": "2026-10-02T03:32:14.000Z" }, { "id": 148866, "urlhaus_id": "3926658", "url": "http://219.157.253.88:45074/bin.sh", "host": "219.157.253.88", "host_ip": "219.157.253.88", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 03:32:14 UTC", "discovered_at": "2026-10-02T03:32:14.000Z" }, { "id": 148865, "urlhaus_id": "3926657", "url": "http://119.99.164.18:42673/i", "host": "119.99.164.18", "host_ip": "119.99.164.18", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 03:32:14 UTC", "discovered_at": "2026-10-02T03:32:14.000Z" }, { "id": 148864, "urlhaus_id": "3926656", "url": "http://105.225.107.62:47773/bin.sh", "host": "105.225.107.62", "host_ip": "105.225.107.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 03:32:14 UTC", "discovered_at": "2026-10-02T03:32:14.000Z" }, { "id": 148869, "urlhaus_id": "3926655", "url": "http://42.235.44.190:41710/i", "host": "42.235.44.190", "host_ip": "42.235.44.190", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 03:17:13 UTC", "discovered_at": "2026-10-02T03:17:13.000Z" }, { "id": 148868, "urlhaus_id": "3926654", "url": "http://115.53.34.254:60869/bin.sh", "host": "115.53.34.254", "host_ip": "115.53.34.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 03:17:13 UTC", "discovered_at": "2026-10-02T03:17:13.000Z" }, { "id": 148870, "urlhaus_id": "3926653", "url": "http://59.97.254.55:45850/i", "host": "59.97.254.55", "host_ip": "59.97.254.55", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 03:17:12 UTC", "discovered_at": "2026-10-02T03:17:12.000Z" }, { "id": 148871, "urlhaus_id": "3926652", "url": "http://182.120.93.84:44860/bin.sh", "host": "182.120.93.84", "host_ip": "182.120.93.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 03:03:11 UTC", "discovered_at": "2026-10-02T03:03:11.000Z" }, { "id": 148873, "urlhaus_id": "3926651", "url": "http://27.210.169.183:53019/bin.sh", "host": "27.210.169.183", "host_ip": "27.210.169.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 03:02:13 UTC", "discovered_at": "2026-10-02T03:02:13.000Z" }, { "id": 148872, "urlhaus_id": "3926650", "url": "http://182.117.77.104:41756/i", "host": "182.117.77.104", "host_ip": "182.117.77.104", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 03:02:13 UTC", "discovered_at": "2026-10-02T03:02:13.000Z" }, { "id": 148874, "urlhaus_id": "3926649", "url": "http://31.4.254.241:49417/i", "host": "31.4.254.241", "host_ip": "31.4.254.241", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 02:32:36 UTC", "discovered_at": "2026-10-02T02:32:36.000Z" }, { "id": 148878, "urlhaus_id": "3926648", "url": "http://105.186.214.211:36127/i", "host": "105.186.214.211", "host_ip": "105.186.214.211", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 02:31:16 UTC", "discovered_at": "2026-10-02T02:31:16.000Z" }, { "id": 148877, "urlhaus_id": "3926647", "url": "http://119.185.241.237:45071/i", "host": "119.185.241.237", "host_ip": "119.185.241.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 02:31:16 UTC", "discovered_at": "2026-10-02T02:31:16.000Z" }, { "id": 148876, "urlhaus_id": "3926646", "url": "http://39.90.151.154:40485/bin.sh", "host": "39.90.151.154", "host_ip": "39.90.151.154", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 02:31:16 UTC", "discovered_at": "2026-10-02T02:31:16.000Z" }, { "id": 148875, "urlhaus_id": "3926645", "url": "http://45.232.72.245:57845/i", "host": "45.232.72.245", "host_ip": "45.232.72.245", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 02:31:16 UTC", "discovered_at": "2026-10-02T02:31:16.000Z" }, { "id": 148879, "urlhaus_id": "3926644", "url": "http://196.189.35.226:57013/i", "host": "196.189.35.226", "host_ip": "196.189.35.226", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 02:31:15 UTC", "discovered_at": "2026-10-02T02:31:15.000Z" }, { "id": 148880, "urlhaus_id": "3926643", "url": "http://123.12.97.73:54508/i", "host": "123.12.97.73", "host_ip": "123.12.97.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 02:28:10 UTC", "discovered_at": "2026-10-02T02:28:10.000Z" }, { "id": 148881, "urlhaus_id": "3926642", "url": "http://109.235.7.1:49706/i", "host": "109.235.7.1", "host_ip": "109.235.7.1", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 02:27:30 UTC", "discovered_at": "2026-10-02T02:27:30.000Z" }, { "id": 148882, "urlhaus_id": "3926641", "url": "http://115.55.23.171:47870/i", "host": "115.55.23.171", "host_ip": "115.55.23.171", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 02:17:17 UTC", "discovered_at": "2026-10-02T02:17:17.000Z" }, { "id": 148883, "urlhaus_id": "3926640", "url": "http://113.231.116.128:55031/i", "host": "113.231.116.128", "host_ip": "113.231.116.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf", "last_online": null, "first_seen": "2026-10-02 02:03:17 UTC", "discovered_at": "2026-10-02T02:03:17.000Z" }, { "id": 148884, "urlhaus_id": "3926639", "url": "http://59.180.169.243:35570/bin.sh", "host": "59.180.169.243", "host_ip": "59.180.169.243", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 02:02:24 UTC", "discovered_at": "2026-10-02T02:02:24.000Z" }, { "id": 148885, "urlhaus_id": "3926638", "url": "http://125.42.202.219:48195/i", "host": "125.42.202.219", "host_ip": "125.42.202.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 02:02:11 UTC", "discovered_at": "2026-10-02T02:02:11.000Z" }, { "id": 148886, "urlhaus_id": "3926637", "url": "http://2.182.177.208:60409/i", "host": "2.182.177.208", "host_ip": "2.182.177.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 02:01:11 UTC", "discovered_at": "2026-10-02T02:01:11.000Z" }, { "id": 148888, "urlhaus_id": "3926636", "url": "http://38.48.60.100:55192/bin.sh", "host": "38.48.60.100", "host_ip": "38.48.60.100", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 02:01:10 UTC", "discovered_at": "2026-10-02T02:01:10.000Z" }, { "id": 148887, "urlhaus_id": "3926635", "url": "http://196.189.197.131:34862/i", "host": "196.189.197.131", "host_ip": "196.189.197.131", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 02:01:10 UTC", "discovered_at": "2026-10-02T02:01:10.000Z" }, { "id": 148889, "urlhaus_id": "3926634", "url": "http://175.165.84.219:34761/i", "host": "175.165.84.219", "host_ip": "175.165.84.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 01:47:26 UTC", "discovered_at": "2026-10-02T01:47:26.000Z" }, { "id": 148890, "urlhaus_id": "3926633", "url": "http://110.136.40.247:33480/bin.sh", "host": "110.136.40.247", "host_ip": "110.136.40.247", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:47:12 UTC", "discovered_at": "2026-10-02T01:47:12.000Z" }, { "id": 148891, "urlhaus_id": "3926632", "url": "http://210.208.110.172:50601/bin.sh", "host": "210.208.110.172", "host_ip": "210.208.110.172", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-02 01:36:12 UTC", "discovered_at": "2026-10-02T01:36:12.000Z" }, { "id": 148892, "urlhaus_id": "3926631", "url": "http://118.120.174.73:47984/i", "host": "118.120.174.73", "host_ip": "118.120.174.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:31:15 UTC", "discovered_at": "2026-10-02T01:31:15.000Z" }, { "id": 148893, "urlhaus_id": "3926630", "url": "http://109.235.7.1:49706/bin.sh", "host": "109.235.7.1", "host_ip": "109.235.7.1", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-02 01:25:21 UTC", "discovered_at": "2026-10-02T01:25:21.000Z" }, { "id": 148894, "urlhaus_id": "3926629", "url": "http://117.26.225.197:36974/i", "host": "117.26.225.197", "host_ip": "117.26.225.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:17:15 UTC", "discovered_at": "2026-10-02T01:17:15.000Z" }, { "id": 148895, "urlhaus_id": "3926628", "url": "http://116.138.109.113:57675/bin.sh", "host": "116.138.109.113", "host_ip": "116.138.109.113", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 01:17:13 UTC", "discovered_at": "2026-10-02T01:17:13.000Z" }, { "id": 148900, "urlhaus_id": "3926627", "url": "http://42.225.202.233:42911/bin.sh", "host": "42.225.202.233", "host_ip": "42.225.202.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 01:17:12 UTC", "discovered_at": "2026-10-02T01:17:12.000Z" }, { "id": 148899, "urlhaus_id": "3926626", "url": "http://196.189.198.173:56505/i", "host": "196.189.198.173", "host_ip": "196.189.198.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:17:12 UTC", "discovered_at": "2026-10-02T01:17:12.000Z" }, { "id": 148898, "urlhaus_id": "3926625", "url": "http://93.157.253.209:46323/bin.sh", "host": "93.157.253.209", "host_ip": "93.157.253.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 01:17:12 UTC", "discovered_at": "2026-10-02T01:17:12.000Z" }, { "id": 148897, "urlhaus_id": "3926624", "url": "http://185.9.139.117:46572/i", "host": "185.9.139.117", "host_ip": "185.9.139.117", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:17:12 UTC", "discovered_at": "2026-10-02T01:17:12.000Z" }, { "id": 148896, "urlhaus_id": "3926623", "url": "http://93.157.253.209:46323/i", "host": "93.157.253.209", "host_ip": "93.157.253.209", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 01:17:12 UTC", "discovered_at": "2026-10-02T01:17:12.000Z" }, { "id": 148901, "urlhaus_id": "3926622", "url": "http://113.221.46.208:58353/bin.sh", "host": "113.221.46.208", "host_ip": "113.221.46.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:16:12 UTC", "discovered_at": "2026-10-02T01:16:12.000Z" }, { "id": 148904, "urlhaus_id": "3926621", "url": "http://38.46.31.127:41849/i", "host": "38.46.31.127", "host_ip": "38.46.31.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:02:12 UTC", "discovered_at": "2026-10-02T01:02:12.000Z" }, { "id": 148903, "urlhaus_id": "3926620", "url": "http://221.14.183.183:57600/bin.sh", "host": "221.14.183.183", "host_ip": "221.14.183.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 01:02:12 UTC", "discovered_at": "2026-10-02T01:02:12.000Z" }, { "id": 148902, "urlhaus_id": "3926619", "url": "http://182.126.198.239:50319/bin.sh", "host": "182.126.198.239", "host_ip": "182.126.198.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 01:02:12 UTC", "discovered_at": "2026-10-02T01:02:12.000Z" }, { "id": 148905, "urlhaus_id": "3926618", "url": "http://125.40.49.75:45103/i", "host": "125.40.49.75", "host_ip": "125.40.49.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 00:47:11 UTC", "discovered_at": "2026-10-02T00:47:11.000Z" }, { "id": 148907, "urlhaus_id": "3926617", "url": "http://42.226.70.133:39212/bin.sh", "host": "42.226.70.133", "host_ip": "42.226.70.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 00:47:10 UTC", "discovered_at": "2026-10-02T00:47:10.000Z" }, { "id": 148906, "urlhaus_id": "3926616", "url": "http://175.150.205.198:60248/i", "host": "175.150.205.198", "host_ip": "175.150.205.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 00:47:10 UTC", "discovered_at": "2026-10-02T00:47:10.000Z" }, { "id": 148909, "urlhaus_id": "3926615", "url": "http://138.204.196.254:46428/bin.sh", "host": "138.204.196.254", "host_ip": "138.204.196.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 00:32:13 UTC", "discovered_at": "2026-10-02T00:32:13.000Z" }, { "id": 148908, "urlhaus_id": "3926614", "url": "http://38.46.31.127:41849/bin.sh", "host": "38.46.31.127", "host_ip": "38.46.31.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 00:32:13 UTC", "discovered_at": "2026-10-02T00:32:13.000Z" }, { "id": 148910, "urlhaus_id": "3926613", "url": "http://222.127.53.189:40982/i", "host": "222.127.53.189", "host_ip": "222.127.53.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 00:17:42 UTC", "discovered_at": "2026-10-02T00:17:42.000Z" }, { "id": 148911, "urlhaus_id": "3926612", "url": "http://59.180.145.77:49007/bin.sh", "host": "59.180.145.77", "host_ip": "59.180.145.77", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 00:17:40 UTC", "discovered_at": "2026-10-02T00:17:40.000Z" }, { "id": 148912, "urlhaus_id": "3926611", "url": "http://175.150.205.198:60248/bin.sh", "host": "175.150.205.198", "host_ip": "175.150.205.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 00:17:17 UTC", "discovered_at": "2026-10-02T00:17:17.000Z" }, { "id": 148913, "urlhaus_id": "3926610", "url": "http://61.52.185.101:48782/i", "host": "61.52.185.101", "host_ip": "61.52.185.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-02 00:17:16 UTC", "discovered_at": "2026-10-02T00:17:16.000Z" }, { "id": 148914, "urlhaus_id": "3926609", "url": "http://218.16.164.123:41915/i", "host": "218.16.164.123", "host_ip": "218.16.164.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-02 00:01:16 UTC", "discovered_at": "2026-10-02T00:01:16.000Z" }, { "id": 148916, "urlhaus_id": "3926608", "url": "http://113.254.36.153:50445/i", "host": "113.254.36.153", "host_ip": "113.254.36.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 00:01:15 UTC", "discovered_at": "2026-10-02T00:01:15.000Z" }, { "id": 148915, "urlhaus_id": "3926607", "url": "http://125.41.225.209:50263/i", "host": "125.41.225.209", "host_ip": "125.41.225.209", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-02 00:01:15 UTC", "discovered_at": "2026-10-02T00:01:15.000Z" }, { "id": 148917, "urlhaus_id": "3926606", "url": "http://115.61.117.136:50368/i", "host": "115.61.117.136", "host_ip": "115.61.117.136", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 23:46:11 UTC", "discovered_at": "2026-10-01T23:46:11.000Z" }, { "id": 148918, "urlhaus_id": "3926605", "url": "http://115.49.209.223:59964/i", "host": "115.49.209.223", "host_ip": "115.49.209.223", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:33:14 UTC", "discovered_at": "2026-10-01T23:33:14.000Z" }, { "id": 148919, "urlhaus_id": "3926604", "url": "http://61.53.157.233:42044/i", "host": "61.53.157.233", "host_ip": "61.53.157.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:33:13 UTC", "discovered_at": "2026-10-01T23:33:13.000Z" }, { "id": 148920, "urlhaus_id": "3926603", "url": "http://112.242.231.62:59223/i", "host": "112.242.231.62", "host_ip": "112.242.231.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:32:28 UTC", "discovered_at": "2026-10-01T23:32:28.000Z" }, { "id": 148921, "urlhaus_id": "3926602", "url": "http://196.191.231.12:52906/i", "host": "196.191.231.12", "host_ip": "196.191.231.12", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 23:32:13 UTC", "discovered_at": "2026-10-01T23:32:13.000Z" }, { "id": 148924, "urlhaus_id": "3926601", "url": "http://115.55.217.255:56903/bin.sh", "host": "115.55.217.255", "host_ip": "115.55.217.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:32:11 UTC", "discovered_at": "2026-10-01T23:32:11.000Z" }, { "id": 148923, "urlhaus_id": "3926600", "url": "http://112.122.69.198:40759/i", "host": "112.122.69.198", "host_ip": "112.122.69.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 23:32:11 UTC", "discovered_at": "2026-10-01T23:32:11.000Z" }, { "id": 148922, "urlhaus_id": "3926599", "url": "http://219.157.134.110:56057/bin.sh", "host": "219.157.134.110", "host_ip": "219.157.134.110", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:32:11 UTC", "discovered_at": "2026-10-01T23:32:11.000Z" }, { "id": 148925, "urlhaus_id": "3926598", "url": "http://60.23.220.27:43041/bin.sh", "host": "60.23.220.27", "host_ip": "60.23.220.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 23:17:20 UTC", "discovered_at": "2026-10-01T23:17:20.000Z" }, { "id": 148928, "urlhaus_id": "3926597", "url": "http://42.224.144.176:49868/bin.sh", "host": "42.224.144.176", "host_ip": "42.224.144.176", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:17:15 UTC", "discovered_at": "2026-10-01T23:17:15.000Z" }, { "id": 148927, "urlhaus_id": "3926596", "url": "http://182.119.51.115:56538/i", "host": "182.119.51.115", "host_ip": "182.119.51.115", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:17:15 UTC", "discovered_at": "2026-10-01T23:17:15.000Z" }, { "id": 148926, "urlhaus_id": "3926595", "url": "http://115.51.97.51:50588/i", "host": "115.51.97.51", "host_ip": "115.51.97.51", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:17:15 UTC", "discovered_at": "2026-10-01T23:17:15.000Z" }, { "id": 148929, "urlhaus_id": "3926594", "url": "http://120.28.194.204:39344/i", "host": "120.28.194.204", "host_ip": "120.28.194.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 23:17:14 UTC", "discovered_at": "2026-10-01T23:17:14.000Z" }, { "id": 148930, "urlhaus_id": "3926593", "url": "http://103.249.199.5:53780/i", "host": "103.249.199.5", "host_ip": "103.249.199.5", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 23:16:15 UTC", "discovered_at": "2026-10-01T23:16:15.000Z" }, { "id": 148931, "urlhaus_id": "3926592", "url": "http://112.237.51.216:33695/bin.sh", "host": "112.237.51.216", "host_ip": "112.237.51.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 23:13:28 UTC", "discovered_at": "2026-10-01T23:13:28.000Z" }, { "id": 148932, "urlhaus_id": "3926591", "url": "http://222.246.40.20:48748/i", "host": "222.246.40.20", "host_ip": "222.246.40.20", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 23:02:13 UTC", "discovered_at": "2026-10-01T23:02:13.000Z" }, { "id": 148937, "urlhaus_id": "3926590", "url": "http://112.122.69.198:40759/bin.sh", "host": "112.122.69.198", "host_ip": "112.122.69.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 23:02:12 UTC", "discovered_at": "2026-10-01T23:02:12.000Z" }, { "id": 148936, "urlhaus_id": "3926589", "url": "http://117.209.124.23:55672/bin.sh", "host": "117.209.124.23", "host_ip": "117.209.124.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:02:12 UTC", "discovered_at": "2026-10-01T23:02:12.000Z" }, { "id": 148935, "urlhaus_id": "3926588", "url": "http://117.209.124.23:55672/i", "host": "117.209.124.23", "host_ip": "117.209.124.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:02:12 UTC", "discovered_at": "2026-10-01T23:02:12.000Z" }, { "id": 148934, "urlhaus_id": "3926587", "url": "http://61.53.157.233:42044/bin.sh", "host": "61.53.157.233", "host_ip": "61.53.157.233", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 23:02:12 UTC", "discovered_at": "2026-10-01T23:02:12.000Z" }, { "id": 148933, "urlhaus_id": "3926586", "url": "http://60.23.233.153:49553/i", "host": "60.23.233.153", "host_ip": "60.23.233.153", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 23:02:12 UTC", "discovered_at": "2026-10-01T23:02:12.000Z" }, { "id": 148939, "urlhaus_id": "3926585", "url": "http://105.224.242.90:47973/i", "host": "105.224.242.90", "host_ip": "105.224.242.90", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 22:47:15 UTC", "discovered_at": "2026-10-01T22:47:15.000Z" }, { "id": 148938, "urlhaus_id": "3926584", "url": "http://110.186.231.117:35755/i", "host": "110.186.231.117", "host_ip": "110.186.231.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 22:47:15 UTC", "discovered_at": "2026-10-01T22:47:15.000Z" }, { "id": 148940, "urlhaus_id": "3926583", "url": "http://125.41.240.155:47349/i", "host": "125.41.240.155", "host_ip": "125.41.240.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 22:47:14 UTC", "discovered_at": "2026-10-01T22:47:14.000Z" }, { "id": 148942, "urlhaus_id": "3926582", "url": "http://119.115.166.198:48650/i", "host": "119.115.166.198", "host_ip": "119.115.166.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 22:32:11 UTC", "discovered_at": "2026-10-01T22:32:11.000Z" }, { "id": 148941, "urlhaus_id": "3926581", "url": "http://125.41.240.155:47349/bin.sh", "host": "125.41.240.155", "host_ip": "125.41.240.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 22:32:11 UTC", "discovered_at": "2026-10-01T22:32:11.000Z" }, { "id": 148952, "urlhaus_id": "3926580", "url": "http://94.183.174.75/bins/morte.arm5", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148951, "urlhaus_id": "3926579", "url": "http://94.183.174.75/systemcl/arc", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148950, "urlhaus_id": "3926578", "url": "http://94.183.174.75/bins/morte.sh4", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148949, "urlhaus_id": "3926577", "url": "http://94.183.174.75/bins/morte.mpsl", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148948, "urlhaus_id": "3926576", "url": "http://94.183.174.75/bins/morte.arc", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148947, "urlhaus_id": "3926575", "url": "http://94.183.174.75/bins/morte.arm6", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148946, "urlhaus_id": "3926574", "url": "http://94.183.174.75/bins/morte.spc", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148945, "urlhaus_id": "3926573", "url": "http://94.183.174.75/bins/morte.arm7", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148944, "urlhaus_id": "3926572", "url": "http://94.183.174.75/bins/morte.mips", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148943, "urlhaus_id": "3926571", "url": "http://94.183.174.75/bins/morte.m68k", "host": "94.183.174.75", "host_ip": "94.183.174.75", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 22:27:16 UTC", "discovered_at": "2026-10-01T22:27:16.000Z" }, { "id": 148953, "urlhaus_id": "3926570", "url": "http://115.48.149.107:56381/bin.sh", "host": "115.48.149.107", "host_ip": "115.48.149.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 22:24:18 UTC", "discovered_at": "2026-10-01T22:24:18.000Z" }, { "id": 148954, "urlhaus_id": "3926569", "url": "http://116.207.221.240:59439/i", "host": "116.207.221.240", "host_ip": "116.207.221.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 22:17:16 UTC", "discovered_at": "2026-10-01T22:17:16.000Z" }, { "id": 148958, "urlhaus_id": "3926568", "url": "http://105.224.5.162:42637/i", "host": "105.224.5.162", "host_ip": "105.224.5.162", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 22:17:15 UTC", "discovered_at": "2026-10-01T22:17:15.000Z" }, { "id": 148957, "urlhaus_id": "3926567", "url": "http://105.224.28.127:46639/i", "host": "105.224.28.127", "host_ip": "105.224.28.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 22:17:15 UTC", "discovered_at": "2026-10-01T22:17:15.000Z" }, { "id": 148956, "urlhaus_id": "3926566", "url": "http://120.28.195.161:40606/i", "host": "120.28.195.161", "host_ip": "120.28.195.161", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 22:17:15 UTC", "discovered_at": "2026-10-01T22:17:15.000Z" }, { "id": 148955, "urlhaus_id": "3926565", "url": "http://123.129.133.230:47233/i", "host": "123.129.133.230", "host_ip": "123.129.133.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 22:17:15 UTC", "discovered_at": "2026-10-01T22:17:15.000Z" }, { "id": 148960, "urlhaus_id": "3926564", "url": "http://222.142.220.150:54414/bin.sh", "host": "222.142.220.150", "host_ip": "222.142.220.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 22:17:14 UTC", "discovered_at": "2026-10-01T22:17:14.000Z" }, { "id": 148959, "urlhaus_id": "3926563", "url": "http://116.138.106.171:59522/i", "host": "116.138.106.171", "host_ip": "116.138.106.171", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 22:17:14 UTC", "discovered_at": "2026-10-01T22:17:14.000Z" }, { "id": 148966, "urlhaus_id": "3926562", "url": "http://176.65.148.112/bins/Hilix.m68k", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:14:14 UTC", "discovered_at": "2026-10-01T22:14:14.000Z" }, { "id": 148965, "urlhaus_id": "3926561", "url": "http://176.65.148.112/bins/Hilix.mips", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:14:14 UTC", "discovered_at": "2026-10-01T22:14:14.000Z" }, { "id": 148964, "urlhaus_id": "3926560", "url": "http://176.65.148.112/bins/Hilix.ppc", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:14:14 UTC", "discovered_at": "2026-10-01T22:14:14.000Z" }, { "id": 148963, "urlhaus_id": "3926559", "url": "http://176.65.148.112/bins/Hilix.mpsl", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:14:14 UTC", "discovered_at": "2026-10-01T22:14:14.000Z" }, { "id": 148962, "urlhaus_id": "3926558", "url": "http://176.65.148.112/bins/Hilix.arm5", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:14:14 UTC", "discovered_at": "2026-10-01T22:14:14.000Z" }, { "id": 148961, "urlhaus_id": "3926557", "url": "http://176.65.148.112/bins/Hilix.x86", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:14:14 UTC", "discovered_at": "2026-10-01T22:14:14.000Z" }, { "id": 148970, "urlhaus_id": "3926556", "url": "http://176.65.148.112/bins/Hilix.arm7", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:13:30 UTC", "discovered_at": "2026-10-01T22:13:30.000Z" }, { "id": 148969, "urlhaus_id": "3926555", "url": "http://176.65.148.112/bins/Hilix.arm", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:13:30 UTC", "discovered_at": "2026-10-01T22:13:30.000Z" }, { "id": 148968, "urlhaus_id": "3926554", "url": "http://176.65.148.112/bins/Hilix.arm6", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:13:30 UTC", "discovered_at": "2026-10-01T22:13:30.000Z" }, { "id": 148967, "urlhaus_id": "3926553", "url": "http://176.65.148.112/bins/Hilix.sh4", "host": "176.65.148.112", "host_ip": "176.65.148.112", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 22:13:30 UTC", "discovered_at": "2026-10-01T22:13:30.000Z" }, { "id": 148972, "urlhaus_id": "3926552", "url": "http://124.135.36.37:47890/bin.sh", "host": "124.135.36.37", "host_ip": "124.135.36.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 22:02:11 UTC", "discovered_at": "2026-10-01T22:02:11.000Z" }, { "id": 148971, "urlhaus_id": "3926551", "url": "http://124.135.36.37:47890/i", "host": "124.135.36.37", "host_ip": "124.135.36.37", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 22:02:11 UTC", "discovered_at": "2026-10-01T22:02:11.000Z" }, { "id": 148973, "urlhaus_id": "3926550", "url": "http://115.48.149.107:56381/i", "host": "115.48.149.107", "host_ip": "115.48.149.107", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 22:02:10 UTC", "discovered_at": "2026-10-01T22:02:10.000Z" }, { "id": 148974, "urlhaus_id": "3926549", "url": "http://119.187.235.240:39789/bin.sh", "host": "119.187.235.240", "host_ip": "119.187.235.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:48:12 UTC", "discovered_at": "2026-10-01T21:48:12.000Z" }, { "id": 148981, "urlhaus_id": "3926548", "url": "http://60.17.79.255:41691/i", "host": "60.17.79.255", "host_ip": "60.17.79.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:47:14 UTC", "discovered_at": "2026-10-01T21:47:14.000Z" }, { "id": 148980, "urlhaus_id": "3926547", "url": "http://60.17.79.255:41691/bin.sh", "host": "60.17.79.255", "host_ip": "60.17.79.255", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:47:14 UTC", "discovered_at": "2026-10-01T21:47:14.000Z" }, { "id": 148979, "urlhaus_id": "3926546", "url": "http://123.10.143.179:51663/i", "host": "123.10.143.179", "host_ip": "123.10.143.179", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:47:14 UTC", "discovered_at": "2026-10-01T21:47:14.000Z" }, { "id": 148978, "urlhaus_id": "3926545", "url": "http://60.23.168.43:37885/i", "host": "60.23.168.43", "host_ip": "60.23.168.43", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:47:14 UTC", "discovered_at": "2026-10-01T21:47:14.000Z" }, { "id": 148977, "urlhaus_id": "3926544", "url": "http://123.129.133.230:47233/bin.sh", "host": "123.129.133.230", "host_ip": "123.129.133.230", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:47:14 UTC", "discovered_at": "2026-10-01T21:47:14.000Z" }, { "id": 148976, "urlhaus_id": "3926543", "url": "http://183.35.50.177:40190/i", "host": "183.35.50.177", "host_ip": "183.35.50.177", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 21:47:14 UTC", "discovered_at": "2026-10-01T21:47:14.000Z" }, { "id": 148975, "urlhaus_id": "3926542", "url": "http://116.138.106.171:59522/bin.sh", "host": "116.138.106.171", "host_ip": "116.138.106.171", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:47:14 UTC", "discovered_at": "2026-10-01T21:47:14.000Z" }, { "id": 148983, "urlhaus_id": "3926541", "url": "http://182.126.94.236:55843/i", "host": "182.126.94.236", "host_ip": "182.126.94.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:47:13 UTC", "discovered_at": "2026-10-01T21:47:13.000Z" }, { "id": 148982, "urlhaus_id": "3926540", "url": "http://120.28.199.24:54015/i", "host": "120.28.199.24", "host_ip": "120.28.199.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 21:47:13 UTC", "discovered_at": "2026-10-01T21:47:13.000Z" }, { "id": 148984, "urlhaus_id": "3926539", "url": "http://182.127.123.222:33282/i", "host": "182.127.123.222", "host_ip": "182.127.123.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:46:12 UTC", "discovered_at": "2026-10-01T21:46:12.000Z" }, { "id": 148985, "urlhaus_id": "3926538", "url": "http://190.109.228.110:56122/bin.sh", "host": "190.109.228.110", "host_ip": "190.109.228.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 21:32:11 UTC", "discovered_at": "2026-10-01T21:32:11.000Z" }, { "id": 148988, "urlhaus_id": "3926537", "url": "http://222.140.182.183:49632/i", "host": "222.140.182.183", "host_ip": "222.140.182.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:32:10 UTC", "discovered_at": "2026-10-01T21:32:10.000Z" }, { "id": 148987, "urlhaus_id": "3926536", "url": "http://42.57.203.4:57127/i", "host": "42.57.203.4", "host_ip": "42.57.203.4", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:32:10 UTC", "discovered_at": "2026-10-01T21:32:10.000Z" }, { "id": 148986, "urlhaus_id": "3926535", "url": "http://115.58.91.2:54820/bin.sh", "host": "115.58.91.2", "host_ip": "115.58.91.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:32:10 UTC", "discovered_at": "2026-10-01T21:32:10.000Z" }, { "id": 148989, "urlhaus_id": "3926534", "url": "http://109.165.53.128:41927/i", "host": "109.165.53.128", "host_ip": "109.165.53.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 21:32:09 UTC", "discovered_at": "2026-10-01T21:32:09.000Z" }, { "id": 148991, "urlhaus_id": "3926533", "url": "http://109.165.53.128:41927/bin.sh", "host": "109.165.53.128", "host_ip": "109.165.53.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 21:17:12 UTC", "discovered_at": "2026-10-01T21:17:12.000Z" }, { "id": 148990, "urlhaus_id": "3926532", "url": "http://42.237.252.225:53425/i", "host": "42.237.252.225", "host_ip": "42.237.252.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 21:17:12 UTC", "discovered_at": "2026-10-01T21:17:12.000Z" }, { "id": 148994, "urlhaus_id": "3926531", "url": "http://60.23.232.134:40004/bin.sh", "host": "60.23.232.134", "host_ip": "60.23.232.134", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:17:11 UTC", "discovered_at": "2026-10-01T21:17:11.000Z" }, { "id": 148993, "urlhaus_id": "3926530", "url": "http://182.127.123.222:33282/bin.sh", "host": "182.127.123.222", "host_ip": "182.127.123.222", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:17:11 UTC", "discovered_at": "2026-10-01T21:17:11.000Z" }, { "id": 148992, "urlhaus_id": "3926529", "url": "http://60.18.1.146:39352/bin.sh", "host": "60.18.1.146", "host_ip": "60.18.1.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:17:11 UTC", "discovered_at": "2026-10-01T21:17:11.000Z" }, { "id": 148995, "urlhaus_id": "3926528", "url": "http://196.190.69.149:40737/i", "host": "196.190.69.149", "host_ip": "196.190.69.149", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:02:26 UTC", "discovered_at": "2026-10-01T21:02:26.000Z" }, { "id": 148997, "urlhaus_id": "3926527", "url": "http://182.117.15.101:47642/i", "host": "182.117.15.101", "host_ip": "182.117.15.101", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:02:15 UTC", "discovered_at": "2026-10-01T21:02:15.000Z" }, { "id": 148996, "urlhaus_id": "3926526", "url": "http://123.189.177.133:48431/i", "host": "123.189.177.133", "host_ip": "123.189.177.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 21:02:15 UTC", "discovered_at": "2026-10-01T21:02:15.000Z" }, { "id": 148998, "urlhaus_id": "3926525", "url": "http://182.127.82.17:60203/i", "host": "182.127.82.17", "host_ip": "182.127.82.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 21:02:14 UTC", "discovered_at": "2026-10-01T21:02:14.000Z" }, { "id": 148999, "urlhaus_id": "3926524", "url": "http://221.225.253.118:47327/bin.sh", "host": "221.225.253.118", "host_ip": "221.225.253.118", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 20:49:22 UTC", "discovered_at": "2026-10-01T20:49:22.000Z" }, { "id": 149000, "urlhaus_id": "3926523", "url": "http://42.237.252.225:53425/bin.sh", "host": "42.237.252.225", "host_ip": "42.237.252.225", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 20:47:25 UTC", "discovered_at": "2026-10-01T20:47:25.000Z" }, { "id": 149001, "urlhaus_id": "3926522", "url": "http://60.18.1.146:39352/i", "host": "60.18.1.146", "host_ip": "60.18.1.146", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 20:47:13 UTC", "discovered_at": "2026-10-01T20:47:13.000Z" }, { "id": 149005, "urlhaus_id": "3926521", "url": "http://175.30.91.176:38588/i", "host": "175.30.91.176", "host_ip": "175.30.91.176", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 20:47:12 UTC", "discovered_at": "2026-10-01T20:47:12.000Z" }, { "id": 149004, "urlhaus_id": "3926520", "url": "http://115.42.71.239:36612/bin.sh", "host": "115.42.71.239", "host_ip": "115.42.71.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:47:12 UTC", "discovered_at": "2026-10-01T20:47:12.000Z" }, { "id": 149003, "urlhaus_id": "3926519", "url": "http://42.230.219.48:36307/bin.sh", "host": "42.230.219.48", "host_ip": "42.230.219.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:47:12 UTC", "discovered_at": "2026-10-01T20:47:12.000Z" }, { "id": 149002, "urlhaus_id": "3926518", "url": "http://125.44.217.153:51472/i", "host": "125.44.217.153", "host_ip": "125.44.217.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:47:12 UTC", "discovered_at": "2026-10-01T20:47:12.000Z" }, { "id": 149006, "urlhaus_id": "3926517", "url": "http://182.127.82.17:60203/bin.sh", "host": "182.127.82.17", "host_ip": "182.127.82.17", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:33:10 UTC", "discovered_at": "2026-10-01T20:33:10.000Z" }, { "id": 149007, "urlhaus_id": "3926516", "url": "http://112.248.161.201:45159/i", "host": "112.248.161.201", "host_ip": "112.248.161.201", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:32:36 UTC", "discovered_at": "2026-10-01T20:32:36.000Z" }, { "id": 149008, "urlhaus_id": "3926515", "url": "http://222.140.208.8:33116/i", "host": "222.140.208.8", "host_ip": "222.140.208.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 20:32:28 UTC", "discovered_at": "2026-10-01T20:32:28.000Z" }, { "id": 149009, "urlhaus_id": "3926514", "url": "http://119.187.235.240:39789/i", "host": "119.187.235.240", "host_ip": "119.187.235.240", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:32:25 UTC", "discovered_at": "2026-10-01T20:32:25.000Z" }, { "id": 149011, "urlhaus_id": "3926513", "url": "http://182.120.93.84:44860/i", "host": "182.120.93.84", "host_ip": "182.120.93.84", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:32:18 UTC", "discovered_at": "2026-10-01T20:32:18.000Z" }, { "id": 149010, "urlhaus_id": "3926512", "url": "http://105.184.34.53:40057/i", "host": "105.184.34.53", "host_ip": "105.184.34.53", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 20:32:18 UTC", "discovered_at": "2026-10-01T20:32:18.000Z" }, { "id": 149013, "urlhaus_id": "3926511", "url": "http://182.126.113.232:40409/bin.sh", "host": "182.126.113.232", "host_ip": "182.126.113.232", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:32:17 UTC", "discovered_at": "2026-10-01T20:32:17.000Z" }, { "id": 149012, "urlhaus_id": "3926510", "url": "http://116.138.235.185:37309/i", "host": "116.138.235.185", "host_ip": "116.138.235.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 20:32:17 UTC", "discovered_at": "2026-10-01T20:32:17.000Z" }, { "id": 149015, "urlhaus_id": "3926509", "url": "http://125.44.217.153:51472/bin.sh", "host": "125.44.217.153", "host_ip": "125.44.217.153", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:17:13 UTC", "discovered_at": "2026-10-01T20:17:13.000Z" }, { "id": 149014, "urlhaus_id": "3926508", "url": "http://175.173.85.81:49158/bin.sh", "host": "175.173.85.81", "host_ip": "175.173.85.81", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 20:17:13 UTC", "discovered_at": "2026-10-01T20:17:13.000Z" }, { "id": 149019, "urlhaus_id": "3926507", "url": "http://201.110.61.47:38216/i", "host": "201.110.61.47", "host_ip": "201.110.61.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 20:01:15 UTC", "discovered_at": "2026-10-01T20:01:15.000Z" }, { "id": 149018, "urlhaus_id": "3926506", "url": "http://115.56.146.196:37038/bin.sh", "host": "115.56.146.196", "host_ip": "115.56.146.196", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 20:01:15 UTC", "discovered_at": "2026-10-01T20:01:15.000Z" }, { "id": 149017, "urlhaus_id": "3926505", "url": "http://105.186.240.247:38999/i", "host": "105.186.240.247", "host_ip": "105.186.240.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 20:01:15 UTC", "discovered_at": "2026-10-01T20:01:15.000Z" }, { "id": 149016, "urlhaus_id": "3926504", "url": "http://27.207.187.125:46979/i", "host": "27.207.187.125", "host_ip": "27.207.187.125", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 20:01:15 UTC", "discovered_at": "2026-10-01T20:01:15.000Z" }, { "id": 149020, "urlhaus_id": "3926503", "url": "http://115.57.183.7:47813/i", "host": "115.57.183.7", "host_ip": "115.57.183.7", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:47:13 UTC", "discovered_at": "2026-10-01T19:47:13.000Z" }, { "id": 149021, "urlhaus_id": "3926502", "url": "http://122.241.89.11:35340/bin.sh", "host": "122.241.89.11", "host_ip": "122.241.89.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 19:47:11 UTC", "discovered_at": "2026-10-01T19:47:11.000Z" }, { "id": 149022, "urlhaus_id": "3926501", "url": "http://115.60.252.127:37457/i", "host": "115.60.252.127", "host_ip": "115.60.252.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 19:47:10 UTC", "discovered_at": "2026-10-01T19:47:10.000Z" }, { "id": 149023, "urlhaus_id": "3926500", "url": "http://125.43.4.58:34827/bin.sh", "host": "125.43.4.58", "host_ip": "125.43.4.58", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 19:42:32 UTC", "discovered_at": "2026-10-01T19:42:32.000Z" }, { "id": 149024, "urlhaus_id": "3926499", "url": "http://201.110.61.47:38216/bin.sh", "host": "201.110.61.47", "host_ip": "201.110.61.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 19:34:21 UTC", "discovered_at": "2026-10-01T19:34:21.000Z" }, { "id": 149025, "urlhaus_id": "3926498", "url": "http://105.186.240.247:38999/bin.sh", "host": "105.186.240.247", "host_ip": "105.186.240.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 19:32:14 UTC", "discovered_at": "2026-10-01T19:32:14.000Z" }, { "id": 149027, "urlhaus_id": "3926497", "url": "http://182.126.198.239:50319/i", "host": "182.126.198.239", "host_ip": "182.126.198.239", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 19:32:13 UTC", "discovered_at": "2026-10-01T19:32:13.000Z" }, { "id": 149026, "urlhaus_id": "3926496", "url": "http://125.41.222.58:39181/i", "host": "125.41.222.58", "host_ip": "125.41.222.58", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:32:13 UTC", "discovered_at": "2026-10-01T19:32:13.000Z" }, { "id": 149028, "urlhaus_id": "3926495", "url": "http://119.99.91.121:46578/bin.sh", "host": "119.99.91.121", "host_ip": "119.99.91.121", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 19:31:17 UTC", "discovered_at": "2026-10-01T19:31:17.000Z" }, { "id": 149029, "urlhaus_id": "3926494", "url": "http://27.18.91.152:40493/bin.sh", "host": "27.18.91.152", "host_ip": "27.18.91.152", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 19:17:20 UTC", "discovered_at": "2026-10-01T19:17:20.000Z" }, { "id": 149033, "urlhaus_id": "3926493", "url": "http://59.96.136.239:39277/i", "host": "59.96.136.239", "host_ip": "59.96.136.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:16:18 UTC", "discovered_at": "2026-10-01T19:16:18.000Z" }, { "id": 149032, "urlhaus_id": "3926492", "url": "http://59.96.143.49:50302/i", "host": "59.96.143.49", "host_ip": "59.96.143.49", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 19:16:18 UTC", "discovered_at": "2026-10-01T19:16:18.000Z" }, { "id": 149031, "urlhaus_id": "3926491", "url": "http://59.96.136.239:39277/bin.sh", "host": "59.96.136.239", "host_ip": "59.96.136.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:16:18 UTC", "discovered_at": "2026-10-01T19:16:18.000Z" }, { "id": 149030, "urlhaus_id": "3926490", "url": "http://125.41.222.58:39181/bin.sh", "host": "125.41.222.58", "host_ip": "125.41.222.58", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:16:18 UTC", "discovered_at": "2026-10-01T19:16:18.000Z" }, { "id": 149034, "urlhaus_id": "3926489", "url": "http://36.70.64.64:42007/i", "host": "36.70.64.64", "host_ip": "36.70.64.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 19:02:19 UTC", "discovered_at": "2026-10-01T19:02:19.000Z" }, { "id": 149037, "urlhaus_id": "3926488", "url": "http://125.41.211.84:50692/i", "host": "125.41.211.84", "host_ip": "125.41.211.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:02:14 UTC", "discovered_at": "2026-10-01T19:02:14.000Z" }, { "id": 149036, "urlhaus_id": "3926487", "url": "http://27.216.70.148:36395/i", "host": "27.216.70.148", "host_ip": "27.216.70.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:02:14 UTC", "discovered_at": "2026-10-01T19:02:14.000Z" }, { "id": 149035, "urlhaus_id": "3926486", "url": "http://27.216.70.148:36395/bin.sh", "host": "27.216.70.148", "host_ip": "27.216.70.148", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 19:02:14 UTC", "discovered_at": "2026-10-01T19:02:14.000Z" }, { "id": 149038, "urlhaus_id": "3926485", "url": "http://222.127.251.169:51350/i", "host": "222.127.251.169", "host_ip": "222.127.251.169", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 19:02:13 UTC", "discovered_at": "2026-10-01T19:02:13.000Z" }, { "id": 146465, "urlhaus_id": "3926484", "url": "http://115.60.252.127:37457/bin.sh", "host": "115.60.252.127", "host_ip": "115.60.252.127", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 18:47:14 UTC", "discovered_at": "2026-10-01T18:47:14.000Z" }, { "id": 146466, "urlhaus_id": "3926483", "url": "http://222.140.159.237:38669/bin.sh", "host": "222.140.159.237", "host_ip": "222.140.159.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 18:32:14 UTC", "discovered_at": "2026-10-01T18:32:14.000Z" }, { "id": 146467, "urlhaus_id": "3926482", "url": "http://60.23.235.155:39254/i", "host": "60.23.235.155", "host_ip": "60.23.235.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 18:32:13 UTC", "discovered_at": "2026-10-01T18:32:13.000Z" }, { "id": 146468, "urlhaus_id": "3926481", "url": "http://182.127.31.149:43127/i", "host": "182.127.31.149", "host_ip": "182.127.31.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 18:21:15 UTC", "discovered_at": "2026-10-01T18:21:15.000Z" }, { "id": 146469, "urlhaus_id": "3926480", "url": "http://123.4.245.79:59572/bin.sh", "host": "123.4.245.79", "host_ip": "123.4.245.79", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 18:18:18 UTC", "discovered_at": "2026-10-01T18:18:18.000Z" }, { "id": 146470, "urlhaus_id": "3926479", "url": "http://61.52.84.197:54479/i", "host": "61.52.84.197", "host_ip": "61.52.84.197", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 18:17:11 UTC", "discovered_at": "2026-10-01T18:17:11.000Z" }, { "id": 146473, "urlhaus_id": "3926478", "url": "http://123.12.41.218:41157/bin.sh", "host": "123.12.41.218", "host_ip": "123.12.41.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 18:17:10 UTC", "discovered_at": "2026-10-01T18:17:10.000Z" }, { "id": 146472, "urlhaus_id": "3926477", "url": "http://125.41.247.56:43423/bin.sh", "host": "125.41.247.56", "host_ip": "125.41.247.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 18:17:10 UTC", "discovered_at": "2026-10-01T18:17:10.000Z" }, { "id": 146471, "urlhaus_id": "3926476", "url": "http://58.47.111.33:42894/i", "host": "58.47.111.33", "host_ip": "58.47.111.33", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 18:17:10 UTC", "discovered_at": "2026-10-01T18:17:10.000Z" }, { "id": 146474, "urlhaus_id": "3926475", "url": "http://91.137.217.64:55199/i", "host": "91.137.217.64", "host_ip": "91.137.217.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 18:16:17 UTC", "discovered_at": "2026-10-01T18:16:17.000Z" }, { "id": 146475, "urlhaus_id": "3926474", "url": "http://118.120.174.73:47984/bin.sh", "host": "118.120.174.73", "host_ip": "118.120.174.73", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 18:15:15 UTC", "discovered_at": "2026-10-01T18:15:15.000Z" }, { "id": 146476, "urlhaus_id": "3926473", "url": "http://105.184.94.10:40511/i", "host": "105.184.94.10", "host_ip": "105.184.94.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 18:03:27 UTC", "discovered_at": "2026-10-01T18:03:27.000Z" }, { "id": 146478, "urlhaus_id": "3926472", "url": "http://115.204.48.240:48839/bin.sh", "host": "115.204.48.240", "host_ip": "115.204.48.240", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 18:02:14 UTC", "discovered_at": "2026-10-01T18:02:14.000Z" }, { "id": 146477, "urlhaus_id": "3926471", "url": "http://123.12.41.218:41157/i", "host": "123.12.41.218", "host_ip": "123.12.41.218", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 18:02:14 UTC", "discovered_at": "2026-10-01T18:02:14.000Z" }, { "id": 146481, "urlhaus_id": "3926470", "url": "http://116.138.235.185:37309/bin.sh", "host": "116.138.235.185", "host_ip": "116.138.235.185", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 18:02:13 UTC", "discovered_at": "2026-10-01T18:02:13.000Z" }, { "id": 146480, "urlhaus_id": "3926469", "url": "http://119.116.35.244:58903/i", "host": "119.116.35.244", "host_ip": "119.116.35.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 18:02:13 UTC", "discovered_at": "2026-10-01T18:02:13.000Z" }, { "id": 146479, "urlhaus_id": "3926468", "url": "http://60.23.235.155:39254/bin.sh", "host": "60.23.235.155", "host_ip": "60.23.235.155", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 18:02:13 UTC", "discovered_at": "2026-10-01T18:02:13.000Z" }, { "id": 146482, "urlhaus_id": "3926467", "url": "http://105.184.94.10:40511/bin.sh", "host": "105.184.94.10", "host_ip": "105.184.94.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 18:00:21 UTC", "discovered_at": "2026-10-01T18:00:21.000Z" }, { "id": 146483, "urlhaus_id": "3926466", "url": "http://182.127.31.149:43127/bin.sh", "host": "182.127.31.149", "host_ip": "182.127.31.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 17:56:21 UTC", "discovered_at": "2026-10-01T17:56:21.000Z" }, { "id": 146484, "urlhaus_id": "3926465", "url": "http://105.224.47.70:38811/bin.sh", "host": "105.224.47.70", "host_ip": "105.224.47.70", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 17:56:17 UTC", "discovered_at": "2026-10-01T17:56:17.000Z" }, { "id": 146485, "urlhaus_id": "3926464", "url": "http://42.5.9.216:40499/i", "host": "42.5.9.216", "host_ip": "42.5.9.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 17:47:25 UTC", "discovered_at": "2026-10-01T17:47:25.000Z" }, { "id": 146486, "urlhaus_id": "3926463", "url": "http://123.188.65.117:35245/i", "host": "123.188.65.117", "host_ip": "123.188.65.117", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 17:46:24 UTC", "discovered_at": "2026-10-01T17:46:24.000Z" }, { "id": 146487, "urlhaus_id": "3926462", "url": "http://58.47.111.33:42894/bin.sh", "host": "58.47.111.33", "host_ip": "58.47.111.33", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 17:46:18 UTC", "discovered_at": "2026-10-01T17:46:18.000Z" }, { "id": 146488, "urlhaus_id": "3926461", "url": "http://105.186.171.99:53371/i", "host": "105.186.171.99", "host_ip": "105.186.171.99", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 17:46:16 UTC", "discovered_at": "2026-10-01T17:46:16.000Z" }, { "id": 146489, "urlhaus_id": "3926460", "url": "http://42.5.9.216:40499/bin.sh", "host": "42.5.9.216", "host_ip": "42.5.9.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 17:17:28 UTC", "discovered_at": "2026-10-01T17:17:28.000Z" }, { "id": 146490, "urlhaus_id": "3926459", "url": "http://115.62.145.147:34979/i", "host": "115.62.145.147", "host_ip": "115.62.145.147", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 17:17:16 UTC", "discovered_at": "2026-10-01T17:17:16.000Z" }, { "id": 146492, "urlhaus_id": "3926458", "url": "http://105.186.171.99:53371/bin.sh", "host": "105.186.171.99", "host_ip": "105.186.171.99", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 17:17:15 UTC", "discovered_at": "2026-10-01T17:17:15.000Z" }, { "id": 146491, "urlhaus_id": "3926457", "url": "http://91.137.217.64:55199/bin.sh", "host": "91.137.217.64", "host_ip": "91.137.217.64", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 17:17:15 UTC", "discovered_at": "2026-10-01T17:17:15.000Z" }, { "id": 146494, "urlhaus_id": "3926456", "url": "http://182.118.242.94:46786/bin.sh", "host": "182.118.242.94", "host_ip": "182.118.242.94", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 17:17:14 UTC", "discovered_at": "2026-10-01T17:17:14.000Z" }, { "id": 146493, "urlhaus_id": "3926455", "url": "http://182.126.94.236:55843/bin.sh", "host": "182.126.94.236", "host_ip": "182.126.94.236", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 17:17:14 UTC", "discovered_at": "2026-10-01T17:17:14.000Z" }, { "id": 146495, "urlhaus_id": "3926454", "url": "http://124.234.207.2:42088/i", "host": "124.234.207.2", "host_ip": "124.234.207.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 17:03:15 UTC", "discovered_at": "2026-10-01T17:03:15.000Z" }, { "id": 146496, "urlhaus_id": "3926453", "url": "http://42.226.70.133:39212/i", "host": "42.226.70.133", "host_ip": "42.226.70.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 17:02:16 UTC", "discovered_at": "2026-10-01T17:02:16.000Z" }, { "id": 146497, "urlhaus_id": "3926452", "url": "http://101.74.154.151:38806/i", "host": "101.74.154.151", "host_ip": "101.74.154.151", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 17:02:12 UTC", "discovered_at": "2026-10-01T17:02:12.000Z" }, { "id": 146498, "urlhaus_id": "3926451", "url": "http://222.127.251.163:56550/i", "host": "222.127.251.163", "host_ip": "222.127.251.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 17:02:11 UTC", "discovered_at": "2026-10-01T17:02:11.000Z" }, { "id": 146499, "urlhaus_id": "3926450", "url": "http://222.127.71.141:55776/i", "host": "222.127.71.141", "host_ip": "222.127.71.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 16:47:21 UTC", "discovered_at": "2026-10-01T16:47:21.000Z" }, { "id": 146500, "urlhaus_id": "3926449", "url": "http://42.52.74.62:37833/bin.sh", "host": "42.52.74.62", "host_ip": "42.52.74.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 16:47:15 UTC", "discovered_at": "2026-10-01T16:47:15.000Z" }, { "id": 146503, "urlhaus_id": "3926448", "url": "http://138.204.196.254:46428/i", "host": "138.204.196.254", "host_ip": "138.204.196.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 16:47:14 UTC", "discovered_at": "2026-10-01T16:47:14.000Z" }, { "id": 146502, "urlhaus_id": "3926447", "url": "http://222.127.71.141:55776/bin.sh", "host": "222.127.71.141", "host_ip": "222.127.71.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 16:47:14 UTC", "discovered_at": "2026-10-01T16:47:14.000Z" }, { "id": 146501, "urlhaus_id": "3926446", "url": "http://175.165.83.134:48152/bin.sh", "host": "175.165.83.134", "host_ip": "175.165.83.134", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 16:47:14 UTC", "discovered_at": "2026-10-01T16:47:14.000Z" }, { "id": 146504, "urlhaus_id": "3926445", "url": "http://193.187.101.227:44688/bin.sh", "host": "193.187.101.227", "host_ip": "193.187.101.227", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 16:46:15 UTC", "discovered_at": "2026-10-01T16:46:15.000Z" }, { "id": 146505, "urlhaus_id": "3926444", "url": "http://216.9.224.48/300/emFpjmk.txt", "host": "216.9.224.48", "host_ip": "216.9.224.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rev-base64-loader", "last_online": null, "first_seen": "2026-10-01 16:41:17 UTC", "discovered_at": "2026-10-01T16:41:17.000Z" }, { "id": 146506, "urlhaus_id": "3926443", "url": "http://217.60.76.249:8080/1.jpg", "host": "217.60.76.249", "host_ip": "217.60.76.249", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 16:33:17 UTC", "discovered_at": "2026-10-01T16:33:17.000Z" }, { "id": 146508, "urlhaus_id": "3926442", "url": "http://216.9.224.48/300/hkIfmgm.txt", "host": "216.9.224.48", "host_ip": "216.9.224.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rev-base64-loader", "last_online": null, "first_seen": "2026-10-01 16:33:16 UTC", "discovered_at": "2026-10-01T16:33:16.000Z" }, { "id": 146507, "urlhaus_id": "3926441", "url": "http://216.9.224.48/300/rdIdrif.txt", "host": "216.9.224.48", "host_ip": "216.9.224.48", "url_status": "online", "online": true, "threat": "malware_download", "tags": "rev-base64-loader", "last_online": null, "first_seen": "2026-10-01 16:33:16 UTC", "discovered_at": "2026-10-01T16:33:16.000Z" }, { "id": 146509, "urlhaus_id": "3926440", "url": "http://222.127.251.163:56550/bin.sh", "host": "222.127.251.163", "host_ip": "222.127.251.163", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 16:32:10 UTC", "discovered_at": "2026-10-01T16:32:10.000Z" }, { "id": 146510, "urlhaus_id": "3926439", "url": "http://119.109.233.246:51234/bin.sh", "host": "119.109.233.246", "host_ip": "119.109.233.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 16:32:09 UTC", "discovered_at": "2026-10-01T16:32:09.000Z" }, { "id": 146511, "urlhaus_id": "3926438", "url": "https://drive.google.com/uc?export=download&id=1jXrdMfxhmKBcp62-YNEfaeBIgdmWw-xr", "host": "drive.google.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader", "last_online": null, "first_seen": "2026-10-01 16:31:27 UTC", "discovered_at": "2026-10-01T16:31:27.000Z" }, { "id": 146512, "urlhaus_id": "3926437", "url": "http://112.248.107.150:52723/i", "host": "112.248.107.150", "host_ip": "112.248.107.150", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 16:31:20 UTC", "discovered_at": "2026-10-01T16:31:20.000Z" }, { "id": 146513, "urlhaus_id": "3926436", "url": "http://204.44.69.243/95/img_051422.png", "host": "204.44.69.243", "host_ip": "204.44.69.243", "url_status": "online", "online": true, "threat": "malware_download", "tags": "PhantomStealer, stego", "last_online": null, "first_seen": "2026-10-01 16:28:13 UTC", "discovered_at": "2026-10-01T16:28:13.000Z" }, { "id": 146514, "urlhaus_id": "3926435", "url": "http://220.177.11.230:54471/Mozi.m", "host": "220.177.11.230", "host_ip": "220.177.11.230", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 16:28:12 UTC", "discovered_at": "2026-10-01T16:28:12.000Z" }, { "id": 146515, "urlhaus_id": "3926434", "url": "https://rough-truth-e072.publicftpresend.workers.dev/jbkotwo", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, PhantomStealer", "last_online": null, "first_seen": "2026-10-01 16:27:17 UTC", "discovered_at": "2026-10-01T16:27:17.000Z" }, { "id": 146517, "urlhaus_id": "3926433", "url": "http://198.23.177.220/img/1.jpg", "host": "198.23.177.220", "host_ip": "198.23.177.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": "PhantomStealer, stego", "last_online": null, "first_seen": "2026-10-01 16:27:16 UTC", "discovered_at": "2026-10-01T16:27:16.000Z" }, { "id": 146516, "urlhaus_id": "3926432", "url": "https://tutpaste.com/raw/CPviFs", "host": "tutpaste.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, PhantomStealer", "last_online": null, "first_seen": "2026-10-01 16:27:16 UTC", "discovered_at": "2026-10-01T16:27:16.000Z" }, { "id": 146518, "urlhaus_id": "3926431", "url": "http://107.172.209.126/img/3.jpg2", "host": "107.172.209.126", "host_ip": "107.172.209.126", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "PhantomStealer, stego", "last_online": null, "first_seen": "2026-10-01 16:27:11 UTC", "discovered_at": "2026-10-01T16:27:11.000Z" }, { "id": 146519, "urlhaus_id": "3926430", "url": "https://144.172.85.64/h", "host": "144.172.85.64", "host_ip": "144.172.85.64", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-85-64, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 16:21:25 UTC", "discovered_at": "2026-10-01T16:21:25.000Z" }, { "id": 146520, "urlhaus_id": "3926429", "url": "https://hjha.ao/news1/secured_stub.ps1", "host": "hjha.ao", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Formbook, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 16:21:17 UTC", "discovered_at": "2026-10-01T16:21:17.000Z" }, { "id": 146521, "urlhaus_id": "3926428", "url": "http://113.238.160.135:59424/i", "host": "113.238.160.135", "host_ip": "113.238.160.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 16:16:28 UTC", "discovered_at": "2026-10-01T16:16:28.000Z" }, { "id": 146524, "urlhaus_id": "3926427", "url": "http://175.148.158.47:58832/i", "host": "175.148.158.47", "host_ip": "175.148.158.47", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 16:16:16 UTC", "discovered_at": "2026-10-01T16:16:16.000Z" }, { "id": 146523, "urlhaus_id": "3926426", "url": "https://hjha.ao/new/secured_stub.ps1", "host": "hjha.ao", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 16:16:16 UTC", "discovered_at": "2026-10-01T16:16:16.000Z" }, { "id": 146522, "urlhaus_id": "3926425", "url": "http://120.84.218.167:43117/bin.sh", "host": "120.84.218.167", "host_ip": "120.84.218.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 16:16:16 UTC", "discovered_at": "2026-10-01T16:16:16.000Z" }, { "id": 146526, "urlhaus_id": "3926424", "url": "https://ficus.in/img/img_210244.png", "host": "ficus.in", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-01 16:12:15 UTC", "discovered_at": "2026-10-01T16:12:15.000Z" }, { "id": 146525, "urlhaus_id": "3926423", "url": "https://ficus.in/img/img_205551.png", "host": "ficus.in", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-01 16:12:15 UTC", "discovered_at": "2026-10-01T16:12:15.000Z" }, { "id": 146527, "urlhaus_id": "3926422", "url": "http://maciejbi.hosting24.pl/006sK41x", "host": "maciejbi.hosting24.pl", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-01 16:12:13 UTC", "discovered_at": "2026-10-01T16:12:13.000Z" }, { "id": 146528, "urlhaus_id": "3926421", "url": "http://115.57.252.5:47288/i", "host": "115.57.252.5", "host_ip": "115.57.252.5", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 16:10:29 UTC", "discovered_at": "2026-10-01T16:10:29.000Z" }, { "id": 146529, "urlhaus_id": "3926420", "url": "http://maciejbi.hosting24.pl/e847Sl1P", "host": "maciejbi.hosting24.pl", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-01 16:10:20 UTC", "discovered_at": "2026-10-01T16:10:20.000Z" }, { "id": 146530, "urlhaus_id": "3926419", "url": "https://maciejbi.hosting24.pl/img_120657.png", "host": "maciejbi.hosting24.pl", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "rat, RemcosRAT, stego", "last_online": null, "first_seen": "2026-10-01 16:10:17 UTC", "discovered_at": "2026-10-01T16:10:17.000Z" }, { "id": 146532, "urlhaus_id": "3926418", "url": "https://pub-ce02802067934e0eb072f69bf6427bf6.r2.dev/king.png", "host": "pub-ce02802067934e0eb072f69bf6427bf6.r2.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-01 16:07:17 UTC", "discovered_at": "2026-10-01T16:07:17.000Z" }, { "id": 146531, "urlhaus_id": "3926417", "url": "https://rough-truth-e072.publicftpresend.workers.dev/iwouioimn", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, xworm", "last_online": null, "first_seen": "2026-10-01 16:07:17 UTC", "discovered_at": "2026-10-01T16:07:17.000Z" }, { "id": 146534, "urlhaus_id": "3926416", "url": "https://pub-ce02802067934e0eb072f69bf6427bf6.r2.dev/FX2.png", "host": "pub-ce02802067934e0eb072f69bf6427bf6.r2.dev", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "stego, xworm", "last_online": null, "first_seen": "2026-10-01 16:03:15 UTC", "discovered_at": "2026-10-01T16:03:15.000Z" }, { "id": 146533, "urlhaus_id": "3926415", "url": "https://rough-truth-e072.publicftpresend.workers.dev/svozdar", "host": "rough-truth-e072.publicftpresend.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Encoded, xworm", "last_online": null, "first_seen": "2026-10-01 16:03:15 UTC", "discovered_at": "2026-10-01T16:03:15.000Z" }, { "id": 146535, "urlhaus_id": "3926414", "url": "http://113.238.160.135:59424/bin.sh", "host": "113.238.160.135", "host_ip": "113.238.160.135", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 16:02:16 UTC", "discovered_at": "2026-10-01T16:02:16.000Z" }, { "id": 146536, "urlhaus_id": "3926413", "url": "http://115.55.143.235:60801/i", "host": "115.55.143.235", "host_ip": "115.55.143.235", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 16:00:30 UTC", "discovered_at": "2026-10-01T16:00:30.000Z" }, { "id": 146537, "urlhaus_id": "3926412", "url": "https://144.172.102.119/Bin/ScreenConnect.ClientSetup.exe", "host": "144.172.102.119", "host_ip": "144.172.102.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-102-119, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 15:53:16 UTC", "discovered_at": "2026-10-01T15:53:16.000Z" }, { "id": 146538, "urlhaus_id": "3926411", "url": "https://144.172.102.119/bin/support.client.exe", "host": "144.172.102.119", "host_ip": "144.172.102.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-102-119, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 15:53:14 UTC", "discovered_at": "2026-10-01T15:53:14.000Z" }, { "id": 146539, "urlhaus_id": "3926410", "url": "https://144.172.108.214/Bin/ScreenConnect.ClientSetup.exe", "host": "144.172.108.214", "host_ip": "144.172.108.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-108-214, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 15:52:16 UTC", "discovered_at": "2026-10-01T15:52:16.000Z" }, { "id": 146540, "urlhaus_id": "3926409", "url": "https://144.172.108.214/bin/support.client.exe", "host": "144.172.108.214", "host_ip": "144.172.108.214", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-108-214, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 15:52:12 UTC", "discovered_at": "2026-10-01T15:52:12.000Z" }, { "id": 146541, "urlhaus_id": "3926408", "url": "https://www.correa.ind.br/wp-includes/Text/bnguyj1/qbg1plo/ytlfv1i/cc/securedd_stub.ps1", "host": "www.correa.ind.br", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:50:26 UTC", "discovered_at": "2026-10-01T15:50:26.000Z" }, { "id": 146542, "urlhaus_id": "3926407", "url": "http://185.239.57.147:4188/i", "host": "185.239.57.147", "host_ip": "185.239.57.147", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 15:47:19 UTC", "discovered_at": "2026-10-01T15:47:19.000Z" }, { "id": 146544, "urlhaus_id": "3926406", "url": "http://222.142.201.74:52734/i", "host": "222.142.201.74", "host_ip": "222.142.201.74", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 15:47:15 UTC", "discovered_at": "2026-10-01T15:47:15.000Z" }, { "id": 146543, "urlhaus_id": "3926405", "url": "http://105.186.111.168:49221/bin.sh", "host": "105.186.111.168", "host_ip": "105.186.111.168", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 15:47:15 UTC", "discovered_at": "2026-10-01T15:47:15.000Z" }, { "id": 146545, "urlhaus_id": "3926404", "url": "http://45.248.33.200:43180/bin.sh", "host": "45.248.33.200", "host_ip": "45.248.33.200", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 15:47:14 UTC", "discovered_at": "2026-10-01T15:47:14.000Z" }, { "id": 146546, "urlhaus_id": "3926403", "url": "http://151.242.30.165/s.ps1", "host": "151.242.30.165", "host_ip": "151.242.30.165", "url_status": "online", "online": true, "threat": "malware_download", "tags": "151-242-30-165, powershell, ua-wget", "last_online": null, "first_seen": "2026-10-01 15:33:18 UTC", "discovered_at": "2026-10-01T15:33:18.000Z" }, { "id": 146547, "urlhaus_id": "3926402", "url": "http://120.28.162.208:40404/i", "host": "120.28.162.208", "host_ip": "120.28.162.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 15:32:13 UTC", "discovered_at": "2026-10-01T15:32:13.000Z" }, { "id": 146548, "urlhaus_id": "3926401", "url": "http://41.216.226.127:51974/i", "host": "41.216.226.127", "host_ip": "41.216.226.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 15:31:25 UTC", "discovered_at": "2026-10-01T15:31:25.000Z" }, { "id": 146549, "urlhaus_id": "3926400", "url": "http://42.7.243.36:60898/i", "host": "42.7.243.36", "host_ip": "42.7.243.36", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 15:31:24 UTC", "discovered_at": "2026-10-01T15:31:24.000Z" }, { "id": 146551, "urlhaus_id": "3926399", "url": "http://59.97.252.89:59683/i", "host": "59.97.252.89", "host_ip": "59.97.252.89", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 15:17:12 UTC", "discovered_at": "2026-10-01T15:17:12.000Z" }, { "id": 146550, "urlhaus_id": "3926398", "url": "http://103.203.210.102:47655/bin.sh", "host": "103.203.210.102", "host_ip": "103.203.210.102", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 15:17:12 UTC", "discovered_at": "2026-10-01T15:17:12.000Z" }, { "id": 146552, "urlhaus_id": "3926397", "url": "http://182.117.15.66:43039/bin.sh", "host": "182.117.15.66", "host_ip": "182.117.15.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 15:17:11 UTC", "discovered_at": "2026-10-01T15:17:11.000Z" }, { "id": 146553, "urlhaus_id": "3926396", "url": "http://87130921-60-20220830152356.webstarterz.com/new/secured_stub.ps1", "host": "87130921-60-20220830152356.webstarterz.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:11:16 UTC", "discovered_at": "2026-10-01T15:11:16.000Z" }, { "id": 146555, "urlhaus_id": "3926395", "url": "http://87130921-60-20220830152356.webstarterz.com/vic/crypted.ps1", "host": "87130921-60-20220830152356.webstarterz.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:11:15 UTC", "discovered_at": "2026-10-01T15:11:15.000Z" }, { "id": 146554, "urlhaus_id": "3926394", "url": "http://87130921-60-20220830152356.webstarterz.com/secured_stub.ps1", "host": "87130921-60-20220830152356.webstarterz.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Formbook, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:11:15 UTC", "discovered_at": "2026-10-01T15:11:15.000Z" }, { "id": 146556, "urlhaus_id": "3926393", "url": "http://210.208.111.36:39653/bin.sh", "host": "210.208.111.36", "host_ip": "210.208.111.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 15:07:27 UTC", "discovered_at": "2026-10-01T15:07:27.000Z" }, { "id": 146557, "urlhaus_id": "3926392", "url": "http://120.28.162.208:40404/bin.sh", "host": "120.28.162.208", "host_ip": "120.28.162.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 15:02:23 UTC", "discovered_at": "2026-10-01T15:02:23.000Z" }, { "id": 146558, "urlhaus_id": "3926391", "url": "http://41.216.226.127:51974/bin.sh", "host": "41.216.226.127", "host_ip": "41.216.226.127", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 15:02:14 UTC", "discovered_at": "2026-10-01T15:02:14.000Z" }, { "id": 146561, "urlhaus_id": "3926390", "url": "http://27.220.125.104:55409/i", "host": "27.220.125.104", "host_ip": "27.220.125.104", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 15:02:12 UTC", "discovered_at": "2026-10-01T15:02:12.000Z" }, { "id": 146560, "urlhaus_id": "3926389", "url": "http://115.49.74.44:34062/i", "host": "115.49.74.44", "host_ip": "115.49.74.44", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 15:02:12 UTC", "discovered_at": "2026-10-01T15:02:12.000Z" }, { "id": 146559, "urlhaus_id": "3926388", "url": "http://221.15.14.212:44328/i", "host": "221.15.14.212", "host_ip": "221.15.14.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 15:02:12 UTC", "discovered_at": "2026-10-01T15:02:12.000Z" }, { "id": 146562, "urlhaus_id": "3926387", "url": "http://182.124.1.174:34803/i", "host": "182.124.1.174", "host_ip": "182.124.1.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 15:02:11 UTC", "discovered_at": "2026-10-01T15:02:11.000Z" }, { "id": 146563, "urlhaus_id": "3926386", "url": "https://nsci.space/mmmasabikkk/secured_stub.ps1", "host": "nsci.space", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-01 15:01:18 UTC", "discovered_at": "2026-10-01T15:01:18.000Z" }, { "id": 146564, "urlhaus_id": "3926385", "url": "https://ikechux.publicvm.com/ppprrrinnccee30/secured_stub.ps1", "host": "ikechux.publicvm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:00:21 UTC", "discovered_at": "2026-10-01T15:00:21.000Z" }, { "id": 146565, "urlhaus_id": "3926384", "url": "https://ikechux.publicvm.com/prinnce/secured_stub.ps1", "host": "ikechux.publicvm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:00:18 UTC", "discovered_at": "2026-10-01T15:00:18.000Z" }, { "id": 146566, "urlhaus_id": "3926383", "url": "https://ikechux.publicvm.com/ogaprinncee29/secured_stub.ps1", "host": "ikechux.publicvm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:00:16 UTC", "discovered_at": "2026-10-01T15:00:16.000Z" }, { "id": 146568, "urlhaus_id": "3926382", "url": "https://ikechux.publicvm.com/chiefprince/secured_stub.ps1", "host": "ikechux.publicvm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:00:15 UTC", "discovered_at": "2026-10-01T15:00:15.000Z" }, { "id": 146567, "urlhaus_id": "3926381", "url": "https://ikechux.publicvm.com/mrprinnce28/secured_stub.ps1", "host": "ikechux.publicvm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:00:15 UTC", "discovered_at": "2026-10-01T15:00:15.000Z" }, { "id": 146569, "urlhaus_id": "3926380", "url": "https://ikechux.publicvm.com/prince30/secured_stub.ps1", "host": "ikechux.publicvm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 15:00:14 UTC", "discovered_at": "2026-10-01T15:00:14.000Z" }, { "id": 146570, "urlhaus_id": "3926379", "url": "https://ikechux.publicvm.com/prince1/secured_stub.ps1", "host": "ikechux.publicvm.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, opendir, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-01 14:59:22 UTC", "discovered_at": "2026-10-01T14:59:22.000Z" }, { "id": 146571, "urlhaus_id": "3926378", "url": "http://5.167.213.113:24590/bin.sh", "host": "5.167.213.113", "host_ip": "5.167.213.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 14:53:27 UTC", "discovered_at": "2026-10-01T14:53:27.000Z" }, { "id": 146572, "urlhaus_id": "3926377", "url": "http://217.217.97.96/imgruninc/secured_stub.ps1", "host": "217.217.97.96", "host_ip": "217.217.97.96", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, MassLogger, powershell, ps1, VIPKeylogger", "last_online": null, "first_seen": "2026-10-01 14:49:20 UTC", "discovered_at": "2026-10-01T14:49:20.000Z" }, { "id": 146573, "urlhaus_id": "3926376", "url": "http://66.212.168.217:54499/i", "host": "66.212.168.217", "host_ip": "66.212.168.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 14:47:59 UTC", "discovered_at": "2026-10-01T14:47:59.000Z" }, { "id": 146574, "urlhaus_id": "3926375", "url": "http://190.109.228.110:56122/i", "host": "190.109.228.110", "host_ip": "190.109.228.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 14:47:19 UTC", "discovered_at": "2026-10-01T14:47:19.000Z" }, { "id": 146575, "urlhaus_id": "3926374", "url": "http://92.63.181.175:34097/i", "host": "92.63.181.175", "host_ip": "92.63.181.175", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 14:47:12 UTC", "discovered_at": "2026-10-01T14:47:12.000Z" }, { "id": 146576, "urlhaus_id": "3926373", "url": "http://175.165.87.193:51203/i", "host": "175.165.87.193", "host_ip": "175.165.87.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 14:47:11 UTC", "discovered_at": "2026-10-01T14:47:11.000Z" }, { "id": 146577, "urlhaus_id": "3926372", "url": "http://182.117.15.66:43039/i", "host": "182.117.15.66", "host_ip": "182.117.15.66", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 14:42:20 UTC", "discovered_at": "2026-10-01T14:42:20.000Z" }, { "id": 146578, "urlhaus_id": "3926371", "url": "https://localfiles.live/download_raw/zggkJd3KnVdogmmO/java.exe", "host": "localfiles.live", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, SalatStealer", "last_online": null, "first_seen": "2026-10-01 14:37:24 UTC", "discovered_at": "2026-10-01T14:37:24.000Z" }, { "id": 146579, "urlhaus_id": "3926370", "url": "http://119.185.241.237:45071/bin.sh", "host": "119.185.241.237", "host_ip": "119.185.241.237", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 14:32:14 UTC", "discovered_at": "2026-10-01T14:32:14.000Z" }, { "id": 146582, "urlhaus_id": "3926369", "url": "http://101.108.76.181:42756/bin.sh", "host": "101.108.76.181", "host_ip": "101.108.76.181", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 14:31:25 UTC", "discovered_at": "2026-10-01T14:31:25.000Z" }, { "id": 146581, "urlhaus_id": "3926368", "url": "http://182.124.1.174:34803/bin.sh", "host": "182.124.1.174", "host_ip": "182.124.1.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 14:31:25 UTC", "discovered_at": "2026-10-01T14:31:25.000Z" }, { "id": 146580, "urlhaus_id": "3926367", "url": "http://221.15.14.212:44328/bin.sh", "host": "221.15.14.212", "host_ip": "221.15.14.212", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 14:31:25 UTC", "discovered_at": "2026-10-01T14:31:25.000Z" }, { "id": 146583, "urlhaus_id": "3926366", "url": "http://36.64.184.26:34377/bin.sh", "host": "36.64.184.26", "host_ip": "36.64.184.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 14:31:24 UTC", "discovered_at": "2026-10-01T14:31:24.000Z" }, { "id": 146584, "urlhaus_id": "3926365", "url": "https://pub-fcf9a4a0a9f54d8b8240c682f65e12f9.r2.dev/tropvast.vbs", "host": "pub-fcf9a4a0a9f54d8b8240c682f65e12f9.r2.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AgentTesla, ascii, vbs", "last_online": null, "first_seen": "2026-10-01 14:28:16 UTC", "discovered_at": "2026-10-01T14:28:16.000Z" }, { "id": 146585, "urlhaus_id": "3926364", "url": "https://pub-a327f9d03def4b07b51dba5303fc3620.r2.dev/ojubam.png", "host": "pub-a327f9d03def4b07b51dba5303fc3620.r2.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "AgentTesla", "last_online": null, "first_seen": "2026-10-01 14:28:14 UTC", "discovered_at": "2026-10-01T14:28:14.000Z" }, { "id": 146586, "urlhaus_id": "3926363", "url": "http://39.40.180.142:52050/i", "host": "39.40.180.142", "host_ip": "39.40.180.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 14:17:25 UTC", "discovered_at": "2026-10-01T14:17:25.000Z" }, { "id": 146589, "urlhaus_id": "3926362", "url": "http://59.97.249.51:60039/bin.sh", "host": "59.97.249.51", "host_ip": "59.97.249.51", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 14:16:16 UTC", "discovered_at": "2026-10-01T14:16:16.000Z" }, { "id": 146588, "urlhaus_id": "3926361", "url": "http://59.97.249.51:60039/i", "host": "59.97.249.51", "host_ip": "59.97.249.51", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 14:16:16 UTC", "discovered_at": "2026-10-01T14:16:16.000Z" }, { "id": 146587, "urlhaus_id": "3926360", "url": "http://113.238.160.168:53883/i", "host": "113.238.160.168", "host_ip": "113.238.160.168", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 14:16:16 UTC", "discovered_at": "2026-10-01T14:16:16.000Z" }, { "id": 146590, "urlhaus_id": "3926359", "url": "http://59.97.248.142:41281/i", "host": "59.97.248.142", "host_ip": "59.97.248.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 14:02:16 UTC", "discovered_at": "2026-10-01T14:02:16.000Z" }, { "id": 146591, "urlhaus_id": "3926358", "url": "http://125.40.54.184:33534/i", "host": "125.40.54.184", "host_ip": "125.40.54.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 14:02:14 UTC", "discovered_at": "2026-10-01T14:02:14.000Z" }, { "id": 146594, "urlhaus_id": "3926357", "url": "http://217.60.195.19/bin/manta.m68k", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:50:20 UTC", "discovered_at": "2026-10-01T13:50:20.000Z" }, { "id": 146593, "urlhaus_id": "3926356", "url": "http://217.60.195.19/bin/manta.arc", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:50:20 UTC", "discovered_at": "2026-10-01T13:50:20.000Z" }, { "id": 146592, "urlhaus_id": "3926355", "url": "http://217.60.195.19/bin/manta.sh4", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:50:20 UTC", "discovered_at": "2026-10-01T13:50:20.000Z" }, { "id": 146596, "urlhaus_id": "3926354", "url": "http://217.60.195.19/bin/manta.i686", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:49:22 UTC", "discovered_at": "2026-10-01T13:49:22.000Z" }, { "id": 146595, "urlhaus_id": "3926353", "url": "http://217.60.195.19/bin/manta.mips", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:49:22 UTC", "discovered_at": "2026-10-01T13:49:22.000Z" }, { "id": 146599, "urlhaus_id": "3926352", "url": "http://c2.teamzeroday.net/bin/manta.arc", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:34 UTC", "discovered_at": "2026-10-01T13:48:34.000Z" }, { "id": 146598, "urlhaus_id": "3926351", "url": "http://c2.teamzeroday.net/bin/manta.armv7l", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:34 UTC", "discovered_at": "2026-10-01T13:48:34.000Z" }, { "id": 146597, "urlhaus_id": "3926350", "url": "http://c2.teamzeroday.net/bin/manta.ppc", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:34 UTC", "discovered_at": "2026-10-01T13:48:34.000Z" }, { "id": 146601, "urlhaus_id": "3926349", "url": "http://c2.teamzeroday.net/bin/manta.m68k", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:30 UTC", "discovered_at": "2026-10-01T13:48:30.000Z" }, { "id": 146600, "urlhaus_id": "3926348", "url": "http://c2.teamzeroday.net/bin/manta.sh4", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:30 UTC", "discovered_at": "2026-10-01T13:48:30.000Z" }, { "id": 146602, "urlhaus_id": "3926347", "url": "http://c2.teamzeroday.net/bin/manta.mipsel", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:29 UTC", "discovered_at": "2026-10-01T13:48:29.000Z" }, { "id": 146603, "urlhaus_id": "3926346", "url": "http://c2.teamzeroday.net/bin/manta.aarch64", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:20 UTC", "discovered_at": "2026-10-01T13:48:20.000Z" }, { "id": 146605, "urlhaus_id": "3926345", "url": "http://c2.teamzeroday.net/bin/manta.i686", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:18 UTC", "discovered_at": "2026-10-01T13:48:18.000Z" }, { "id": 146604, "urlhaus_id": "3926344", "url": "http://c2.teamzeroday.net/bin/manta.mips", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:18 UTC", "discovered_at": "2026-10-01T13:48:18.000Z" }, { "id": 146606, "urlhaus_id": "3926343", "url": "http://c2.teamzeroday.net/bin/manta.x86_64", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:17 UTC", "discovered_at": "2026-10-01T13:48:17.000Z" }, { "id": 146613, "urlhaus_id": "3926342", "url": "http://c2.teamzeroday.net/bin/manta.armv6l", "host": "c2.teamzeroday.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-teamzeroday-net, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:15 UTC", "discovered_at": "2026-10-01T13:48:15.000Z" }, { "id": 146612, "urlhaus_id": "3926341", "url": "http://217.60.195.19/bin/manta.ppc", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:15 UTC", "discovered_at": "2026-10-01T13:48:15.000Z" }, { "id": 146611, "urlhaus_id": "3926340", "url": "http://217.60.195.19/bin/manta.aarch64", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:15 UTC", "discovered_at": "2026-10-01T13:48:15.000Z" }, { "id": 146610, "urlhaus_id": "3926339", "url": "http://217.60.195.19/bin/manta.armv6l", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:15 UTC", "discovered_at": "2026-10-01T13:48:15.000Z" }, { "id": 146609, "urlhaus_id": "3926338", "url": "http://217.60.195.19/bin/manta.x86_64", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:15 UTC", "discovered_at": "2026-10-01T13:48:15.000Z" }, { "id": 146608, "urlhaus_id": "3926337", "url": "http://217.60.195.19/bin/manta.armv7l", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:15 UTC", "discovered_at": "2026-10-01T13:48:15.000Z" }, { "id": 146607, "urlhaus_id": "3926336", "url": "http://217.60.195.19/bin/manta.mipsel", "host": "217.60.195.19", "host_ip": "217.60.195.19", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "217-60-195-19, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:48:15 UTC", "discovered_at": "2026-10-01T13:48:15.000Z" }, { "id": 146614, "urlhaus_id": "3926335", "url": "http://175.165.85.220:39794/i", "host": "175.165.85.220", "host_ip": "175.165.85.220", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 13:47:24 UTC", "discovered_at": "2026-10-01T13:47:24.000Z" }, { "id": 146615, "urlhaus_id": "3926334", "url": "http://39.40.180.142:52050/bin.sh", "host": "39.40.180.142", "host_ip": "39.40.180.142", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 13:47:13 UTC", "discovered_at": "2026-10-01T13:47:13.000Z" }, { "id": 146616, "urlhaus_id": "3926333", "url": "http://222.140.208.8:33116/bin.sh", "host": "222.140.208.8", "host_ip": "222.140.208.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 13:47:11 UTC", "discovered_at": "2026-10-01T13:47:11.000Z" }, { "id": 146617, "urlhaus_id": "3926332", "url": "http://119.179.248.208:43170/bin.sh", "host": "119.179.248.208", "host_ip": "119.179.248.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-01 13:34:26 UTC", "discovered_at": "2026-10-01T13:34:26.000Z" }, { "id": 146618, "urlhaus_id": "3926331", "url": "http://94.154.43.100/eclipse/bin/eclipse.apk", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "adb, apk", "last_online": null, "first_seen": "2026-10-01 13:34:24 UTC", "discovered_at": "2026-10-01T13:34:24.000Z" }, { "id": 146619, "urlhaus_id": "3926330", "url": "http://91.92.242.236/files-129312398/files/file_243e9ba790e9d781.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-01 13:34:09 UTC", "discovered_at": "2026-10-01T13:34:09.000Z" }, { "id": 146620, "urlhaus_id": "3926329", "url": "http://178.16.53.91/sh", "host": "178.16.53.91", "host_ip": "178.16.53.91", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "178-16-53-91, sh, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:33:19 UTC", "discovered_at": "2026-10-01T13:33:19.000Z" }, { "id": 146621, "urlhaus_id": "3926328", "url": "http://120.28.194.204:39344/bin.sh", "host": "120.28.194.204", "host_ip": "120.28.194.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 13:33:13 UTC", "discovered_at": "2026-10-01T13:33:13.000Z" }, { "id": 146622, "urlhaus_id": "3926327", "url": "http://125.40.54.184:33534/bin.sh", "host": "125.40.54.184", "host_ip": "125.40.54.184", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 13:32:13 UTC", "discovered_at": "2026-10-01T13:32:13.000Z" }, { "id": 146623, "urlhaus_id": "3926326", "url": "http://180.115.160.144:58849/i", "host": "180.115.160.144", "host_ip": "180.115.160.144", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 13:31:34 UTC", "discovered_at": "2026-10-01T13:31:34.000Z" }, { "id": 146624, "urlhaus_id": "3926325", "url": "http://42.54.103.36:43136/bin.sh", "host": "42.54.103.36", "host_ip": "42.54.103.36", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 13:17:26 UTC", "discovered_at": "2026-10-01T13:17:26.000Z" }, { "id": 146625, "urlhaus_id": "3926324", "url": "http://61.53.152.20:46489/bin.sh", "host": "61.53.152.20", "host_ip": "61.53.152.20", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 13:17:14 UTC", "discovered_at": "2026-10-01T13:17:14.000Z" }, { "id": 146626, "urlhaus_id": "3926323", "url": "http://60.23.237.178:53274/i", "host": "60.23.237.178", "host_ip": "60.23.237.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 13:17:12 UTC", "discovered_at": "2026-10-01T13:17:12.000Z" }, { "id": 146627, "urlhaus_id": "3926322", "url": "http://185.166.153.194/clip.exe", "host": "185.166.153.194", "host_ip": "185.166.153.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "6k, dropped-by-Stealc", "last_online": null, "first_seen": "2026-10-01 13:16:14 UTC", "discovered_at": "2026-10-01T13:16:14.000Z" }, { "id": 146628, "urlhaus_id": "3926321", "url": "http://119.179.248.208:43170/i", "host": "119.179.248.208", "host_ip": "119.179.248.208", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "elf, Mozi", "last_online": null, "first_seen": "2026-10-01 13:09:17 UTC", "discovered_at": "2026-10-01T13:09:17.000Z" }, { "id": 146630, "urlhaus_id": "3926320", "url": "http://176.65.139.242/.Sarm5", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:08:09 UTC", "discovered_at": "2026-10-01T13:08:09.000Z" }, { "id": 146629, "urlhaus_id": "3926319", "url": "http://176.65.139.242/.Smpsl", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:08:09 UTC", "discovered_at": "2026-10-01T13:08:09.000Z" }, { "id": 146638, "urlhaus_id": "3926318", "url": "http://176.65.139.132/x86_64", "host": "176.65.139.132", "host_ip": "176.65.139.132", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-132, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146637, "urlhaus_id": "3926317", "url": "http://176.65.139.242/.Sppc", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146636, "urlhaus_id": "3926316", "url": "http://176.65.139.242/.Sx86", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146635, "urlhaus_id": "3926315", "url": "http://176.65.139.242/.Smips", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146634, "urlhaus_id": "3926314", "url": "http://176.65.139.242/.Sm68k", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146633, "urlhaus_id": "3926313", "url": "http://176.65.139.242/.Sx86_64", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146632, "urlhaus_id": "3926312", "url": "http://176.65.139.242/.Sarm7", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146631, "urlhaus_id": "3926311", "url": "http://119.165.235.139:57919/bin.sh", "host": "119.165.235.139", "host_ip": "119.165.235.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 13:07:22 UTC", "discovered_at": "2026-10-01T13:07:22.000Z" }, { "id": 146641, "urlhaus_id": "3926310", "url": "http://176.65.139.242/.Sarm6", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:06:22 UTC", "discovered_at": "2026-10-01T13:06:22.000Z" }, { "id": 146640, "urlhaus_id": "3926309", "url": "http://176.65.139.242/wget.sh", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:06:22 UTC", "discovered_at": "2026-10-01T13:06:22.000Z" }, { "id": 146639, "urlhaus_id": "3926308", "url": "http://176.65.139.242/.Sspc", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-242, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:06:22 UTC", "discovered_at": "2026-10-01T13:06:22.000Z" }, { "id": 146642, "urlhaus_id": "3926307", "url": "http://176.65.139.242/.Sarm4", "host": "176.65.139.242", "host_ip": "176.65.139.242", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-242, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:06:08 UTC", "discovered_at": "2026-10-01T13:06:08.000Z" }, { "id": 146643, "urlhaus_id": "3926306", "url": "http://94.154.43.30/realtek", "host": "94.154.43.30", "host_ip": "94.154.43.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-30, sh, ua-wget", "last_online": null, "first_seen": "2026-10-01 13:02:18 UTC", "discovered_at": "2026-10-01T13:02:18.000Z" }, { "id": 146644, "urlhaus_id": "3926305", "url": "http://94.154.43.84/mips", "host": "94.154.43.84", "host_ip": "94.154.43.84", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-84, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:59:25 UTC", "discovered_at": "2026-10-01T12:59:25.000Z" }, { "id": 146645, "urlhaus_id": "3926304", "url": "http://222.142.209.215:57875/i", "host": "222.142.209.215", "host_ip": "222.142.209.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:47:12 UTC", "discovered_at": "2026-10-01T12:47:12.000Z" }, { "id": 146646, "urlhaus_id": "3926303", "url": "http://115.55.217.255:56903/i", "host": "115.55.217.255", "host_ip": "115.55.217.255", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:47:10 UTC", "discovered_at": "2026-10-01T12:47:10.000Z" }, { "id": 146649, "urlhaus_id": "3926302", "url": "http://60.23.237.178:53274/bin.sh", "host": "60.23.237.178", "host_ip": "60.23.237.178", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 12:47:09 UTC", "discovered_at": "2026-10-01T12:47:09.000Z" }, { "id": 146648, "urlhaus_id": "3926301", "url": "http://138.204.196.244:38811/i", "host": "138.204.196.244", "host_ip": "138.204.196.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 12:47:09 UTC", "discovered_at": "2026-10-01T12:47:09.000Z" }, { "id": 146647, "urlhaus_id": "3926300", "url": "http://42.54.144.76:56600/bin.sh", "host": "42.54.144.76", "host_ip": "42.54.144.76", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 12:47:09 UTC", "discovered_at": "2026-10-01T12:47:09.000Z" }, { "id": 146650, "urlhaus_id": "3926299", "url": "http://116.10.133.88:48435/i", "host": "116.10.133.88", "host_ip": "116.10.133.88", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 12:39:10 UTC", "discovered_at": "2026-10-01T12:39:10.000Z" }, { "id": 146651, "urlhaus_id": "3926298", "url": "https://203.202.232.203/Bin/ScreenConnect.ClientSetup.exe", "host": "203.202.232.203", "host_ip": "203.202.232.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "203-202-232-203, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:38:14 UTC", "discovered_at": "2026-10-01T12:38:14.000Z" }, { "id": 146652, "urlhaus_id": "3926297", "url": "https://203.202.232.203/bin/support.client.exe", "host": "203.202.232.203", "host_ip": "203.202.232.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": "203-202-232-203, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:38:13 UTC", "discovered_at": "2026-10-01T12:38:13.000Z" }, { "id": 146653, "urlhaus_id": "3926296", "url": "http://119.185.243.231:43251/i", "host": "119.185.243.231", "host_ip": "119.185.243.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 12:36:18 UTC", "discovered_at": "2026-10-01T12:36:18.000Z" }, { "id": 146659, "urlhaus_id": "3926295", "url": "http://45.198.224.131/kushnet.arm7", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:27 UTC", "discovered_at": "2026-10-01T12:34:27.000Z" }, { "id": 146658, "urlhaus_id": "3926294", "url": "http://45.198.224.131/kushnet.m68k", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:27 UTC", "discovered_at": "2026-10-01T12:34:27.000Z" }, { "id": 146657, "urlhaus_id": "3926293", "url": "http://45.198.224.131/kushnet.arm5", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:27 UTC", "discovered_at": "2026-10-01T12:34:27.000Z" }, { "id": 146656, "urlhaus_id": "3926292", "url": "http://45.198.224.131/kushnet.arm6", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:27 UTC", "discovered_at": "2026-10-01T12:34:27.000Z" }, { "id": 146655, "urlhaus_id": "3926291", "url": "http://45.198.224.131/kushnet.arm4l", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:27 UTC", "discovered_at": "2026-10-01T12:34:27.000Z" }, { "id": 146654, "urlhaus_id": "3926290", "url": "http://45.198.224.131/kushnet.ppc", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:27 UTC", "discovered_at": "2026-10-01T12:34:27.000Z" }, { "id": 146663, "urlhaus_id": "3926289", "url": "http://45.198.224.131/kushnet.sh4", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:16 UTC", "discovered_at": "2026-10-01T12:34:16.000Z" }, { "id": 146662, "urlhaus_id": "3926288", "url": "http://45.198.224.131/kushnet.mips", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:16 UTC", "discovered_at": "2026-10-01T12:34:16.000Z" }, { "id": 146661, "urlhaus_id": "3926287", "url": "http://45.198.224.131/kushnet.arm4tl", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:16 UTC", "discovered_at": "2026-10-01T12:34:16.000Z" }, { "id": 146660, "urlhaus_id": "3926286", "url": "http://45.198.224.131/kushnet.ppc440", "host": "45.198.224.131", "host_ip": "45.198.224.131", "url_status": "online", "online": true, "threat": "malware_download", "tags": "45-198-224-131, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:34:16 UTC", "discovered_at": "2026-10-01T12:34:16.000Z" }, { "id": 146665, "urlhaus_id": "3926285", "url": "https://89.106.83.205/bin/support.client.exe", "host": "89.106.83.205", "host_ip": "89.106.83.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "89-106-83-205, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:32:26 UTC", "discovered_at": "2026-10-01T12:32:26.000Z" }, { "id": 146664, "urlhaus_id": "3926284", "url": "https://89.106.83.205/Bin/ScreenConnect.ClientSetup.exe", "host": "89.106.83.205", "host_ip": "89.106.83.205", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "89-106-83-205, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:32:26 UTC", "discovered_at": "2026-10-01T12:32:26.000Z" }, { "id": 146666, "urlhaus_id": "3926283", "url": "http://123.13.85.38:59187/i", "host": "123.13.85.38", "host_ip": "123.13.85.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 12:32:14 UTC", "discovered_at": "2026-10-01T12:32:14.000Z" }, { "id": 146667, "urlhaus_id": "3926282", "url": "http://222.139.44.130:39813/bin.sh", "host": "222.139.44.130", "host_ip": "222.139.44.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:32:13 UTC", "discovered_at": "2026-10-01T12:32:13.000Z" }, { "id": 146668, "urlhaus_id": "3926281", "url": "http://185.141.233.178:40458/bin.sh", "host": "185.141.233.178", "host_ip": "185.141.233.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 12:32:12 UTC", "discovered_at": "2026-10-01T12:32:12.000Z" }, { "id": 146669, "urlhaus_id": "3926280", "url": "https://89.106.83.180/Bin/ScreenConnect.ClientSetup.exe", "host": "89.106.83.180", "host_ip": "89.106.83.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "89-106-83-180, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:31:11 UTC", "discovered_at": "2026-10-01T12:31:11.000Z" }, { "id": 146670, "urlhaus_id": "3926279", "url": "https://89.106.83.180/bin/support.client.exe", "host": "89.106.83.180", "host_ip": "89.106.83.180", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "89-106-83-180, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:31:10 UTC", "discovered_at": "2026-10-01T12:31:10.000Z" }, { "id": 146672, "urlhaus_id": "3926278", "url": "https://89.106.83.29/Bin/ScreenConnect.ClientSetup.exe", "host": "89.106.83.29", "host_ip": "89.106.83.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "89-106-83-29, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:28:14 UTC", "discovered_at": "2026-10-01T12:28:14.000Z" }, { "id": 146671, "urlhaus_id": "3926277", "url": "https://89.106.83.29/bin/support.client.exe", "host": "89.106.83.29", "host_ip": "89.106.83.29", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "89-106-83-29, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:28:14 UTC", "discovered_at": "2026-10-01T12:28:14.000Z" }, { "id": 146673, "urlhaus_id": "3926276", "url": "http://115.42.71.239:36612/i", "host": "115.42.71.239", "host_ip": "115.42.71.239", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 12:23:18 UTC", "discovered_at": "2026-10-01T12:23:18.000Z" }, { "id": 146674, "urlhaus_id": "3926275", "url": "https://23.146.242.246/Bin/ScreenConnect.ClientSetup.exe", "host": "23.146.242.246", "host_ip": "23.146.242.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "23-146-242-246, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:19:16 UTC", "discovered_at": "2026-10-01T12:19:16.000Z" }, { "id": 146675, "urlhaus_id": "3926274", "url": "https://23.146.242.246/bin/support.client.exe", "host": "23.146.242.246", "host_ip": "23.146.242.246", "url_status": "online", "online": true, "threat": "malware_download", "tags": "23-146-242-246, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:19:14 UTC", "discovered_at": "2026-10-01T12:19:14.000Z" }, { "id": 146677, "urlhaus_id": "3926273", "url": "http://221.15.171.23:45897/bin.sh", "host": "221.15.171.23", "host_ip": "221.15.171.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:17:10 UTC", "discovered_at": "2026-10-01T12:17:10.000Z" }, { "id": 146676, "urlhaus_id": "3926272", "url": "http://219.156.102.23:59562/bin.sh", "host": "219.156.102.23", "host_ip": "219.156.102.23", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:17:10 UTC", "discovered_at": "2026-10-01T12:17:10.000Z" }, { "id": 146678, "urlhaus_id": "3926271", "url": "http://42.180.248.244:60748/i", "host": "42.180.248.244", "host_ip": "42.180.248.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 12:17:09 UTC", "discovered_at": "2026-10-01T12:17:09.000Z" }, { "id": 146679, "urlhaus_id": "3926270", "url": "http://80.94.92.128/systemd", "host": "80.94.92.128", "host_ip": "80.94.92.128", "url_status": "online", "online": true, "threat": "malware_download", "tags": "80-94-92-128, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:16:29 UTC", "discovered_at": "2026-10-01T12:16:29.000Z" }, { "id": 146680, "urlhaus_id": "3926269", "url": "http://116.76.206.254:56638/bin.sh", "host": "116.76.206.254", "host_ip": "116.76.206.254", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:16:12 UTC", "discovered_at": "2026-10-01T12:16:12.000Z" }, { "id": 146681, "urlhaus_id": "3926268", "url": "https://23.172.112.215/bin/support.client.exe", "host": "23.172.112.215", "host_ip": "23.172.112.215", "url_status": "online", "online": true, "threat": "malware_download", "tags": "23-172-112-215, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:14:17 UTC", "discovered_at": "2026-10-01T12:14:17.000Z" }, { "id": 146682, "urlhaus_id": "3926267", "url": "http://116.10.133.88:48435/bin.sh", "host": "116.10.133.88", "host_ip": "116.10.133.88", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 12:13:25 UTC", "discovered_at": "2026-10-01T12:13:25.000Z" }, { "id": 146683, "urlhaus_id": "3926266", "url": "http://23.146.242.101/Bin/ScreenConnect.ClientSetup.exe", "host": "23.146.242.101", "host_ip": "23.146.242.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "23-146-242-101, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:13:12 UTC", "discovered_at": "2026-10-01T12:13:12.000Z" }, { "id": 146684, "urlhaus_id": "3926265", "url": "http://23.146.242.101/bin/support.client.exe", "host": "23.146.242.101", "host_ip": "23.146.242.101", "url_status": "online", "online": true, "threat": "malware_download", "tags": "23-146-242-101, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:13:11 UTC", "discovered_at": "2026-10-01T12:13:11.000Z" }, { "id": 146685, "urlhaus_id": "3926264", "url": "http://119.185.243.231:43251/bin.sh", "host": "119.185.243.231", "host_ip": "119.185.243.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 12:11:23 UTC", "discovered_at": "2026-10-01T12:11:23.000Z" }, { "id": 146686, "urlhaus_id": "3926263", "url": "http://45.153.34.245/mpsl", "host": "45.153.34.245", "host_ip": "45.153.34.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-153-34-245, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:10:34 UTC", "discovered_at": "2026-10-01T12:10:34.000Z" }, { "id": 146688, "urlhaus_id": "3926262", "url": "http://45.153.34.245/mips", "host": "45.153.34.245", "host_ip": "45.153.34.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-153-34-245, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:10:31 UTC", "discovered_at": "2026-10-01T12:10:31.000Z" }, { "id": 146687, "urlhaus_id": "3926261", "url": "http://45.153.34.245/dlr.arm7", "host": "45.153.34.245", "host_ip": "45.153.34.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-153-34-245, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:10:31 UTC", "discovered_at": "2026-10-01T12:10:31.000Z" }, { "id": 146690, "urlhaus_id": "3926260", "url": "http://45.153.34.245/arm7", "host": "45.153.34.245", "host_ip": "45.153.34.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-153-34-245, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:10:19 UTC", "discovered_at": "2026-10-01T12:10:19.000Z" }, { "id": 146689, "urlhaus_id": "3926259", "url": "http://45.153.34.245/x86", "host": "45.153.34.245", "host_ip": "45.153.34.245", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-153-34-245, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:10:19 UTC", "discovered_at": "2026-10-01T12:10:19.000Z" }, { "id": 146691, "urlhaus_id": "3926258", "url": "http://45.135.194.95/bin/support.client.exe", "host": "45.135.194.95", "host_ip": "45.135.194.95", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-135-194-95, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:10:15 UTC", "discovered_at": "2026-10-01T12:10:15.000Z" }, { "id": 146692, "urlhaus_id": "3926257", "url": "http://45.135.194.95/Bin/ScreenConnect.ClientSetup.exe", "host": "45.135.194.95", "host_ip": "45.135.194.95", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "45-135-194-95, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:09:11 UTC", "discovered_at": "2026-10-01T12:09:11.000Z" }, { "id": 146693, "urlhaus_id": "3926256", "url": "https://144.172.118.213/Bin/ScreenConnect.ClientSetup.exe", "host": "144.172.118.213", "host_ip": "144.172.118.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-118-213, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:07:13 UTC", "discovered_at": "2026-10-01T12:07:13.000Z" }, { "id": 146694, "urlhaus_id": "3926255", "url": "https://144.172.118.213/bin/support.client.exe", "host": "144.172.118.213", "host_ip": "144.172.118.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "144-172-118-213, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:07:12 UTC", "discovered_at": "2026-10-01T12:07:12.000Z" }, { "id": 146695, "urlhaus_id": "3926254", "url": "https://172.86.88.189/Bin/ScreenConnect.ClientSetup.exe", "host": "172.86.88.189", "host_ip": "172.86.88.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "172-86-88-189, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:05:17 UTC", "discovered_at": "2026-10-01T12:05:17.000Z" }, { "id": 146696, "urlhaus_id": "3926253", "url": "https://172.86.88.189/bin/support.client.exe", "host": "172.86.88.189", "host_ip": "172.86.88.189", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "172-86-88-189, connectwise, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:05:15 UTC", "discovered_at": "2026-10-01T12:05:15.000Z" }, { "id": 146700, "urlhaus_id": "3926252", "url": "http://221.14.183.183:57600/i", "host": "221.14.183.183", "host_ip": "221.14.183.183", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:02:11 UTC", "discovered_at": "2026-10-01T12:02:11.000Z" }, { "id": 146699, "urlhaus_id": "3926251", "url": "http://59.97.251.249:58738/bin.sh", "host": "59.97.251.249", "host_ip": "59.97.251.249", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:02:11 UTC", "discovered_at": "2026-10-01T12:02:11.000Z" }, { "id": 146698, "urlhaus_id": "3926250", "url": "http://105.184.51.38:44563/i", "host": "105.184.51.38", "host_ip": "105.184.51.38", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 12:02:11 UTC", "discovered_at": "2026-10-01T12:02:11.000Z" }, { "id": 146697, "urlhaus_id": "3926249", "url": "http://115.55.5.10:60327/i", "host": "115.55.5.10", "host_ip": "115.55.5.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:02:11 UTC", "discovered_at": "2026-10-01T12:02:11.000Z" }, { "id": 146701, "urlhaus_id": "3926248", "url": "http://143.20.185.213/ayakashi2", "host": "143.20.185.213", "host_ip": "143.20.185.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "143-20-185-213, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 12:01:22 UTC", "discovered_at": "2026-10-01T12:01:22.000Z" }, { "id": 146702, "urlhaus_id": "3926247", "url": "http://115.49.131.205:51819/bin.sh", "host": "115.49.131.205", "host_ip": "115.49.131.205", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 12:01:17 UTC", "discovered_at": "2026-10-01T12:01:17.000Z" }, { "id": 146703, "urlhaus_id": "3926246", "url": "http://176.65.139.160/pid.mips", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:59:22 UTC", "discovered_at": "2026-10-01T11:59:22.000Z" }, { "id": 146704, "urlhaus_id": "3926245", "url": "http://176.65.139.160/x86_64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:36 UTC", "discovered_at": "2026-10-01T11:58:36.000Z" }, { "id": 146710, "urlhaus_id": "3926244", "url": "http://176.65.139.160/pid.ppc", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:35 UTC", "discovered_at": "2026-10-01T11:58:35.000Z" }, { "id": 146709, "urlhaus_id": "3926243", "url": "http://176.65.139.160/ppc64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:35 UTC", "discovered_at": "2026-10-01T11:58:35.000Z" }, { "id": 146708, "urlhaus_id": "3926242", "url": "http://176.65.139.160/ppc64le", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:35 UTC", "discovered_at": "2026-10-01T11:58:35.000Z" }, { "id": 146707, "urlhaus_id": "3926241", "url": "http://176.65.139.160/pid.x86", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:35 UTC", "discovered_at": "2026-10-01T11:58:35.000Z" }, { "id": 146706, "urlhaus_id": "3926240", "url": "http://176.65.139.160/pid.ppc64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:35 UTC", "discovered_at": "2026-10-01T11:58:35.000Z" }, { "id": 146705, "urlhaus_id": "3926239", "url": "http://176.65.139.160/pid.arm6", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:35 UTC", "discovered_at": "2026-10-01T11:58:35.000Z" }, { "id": 146713, "urlhaus_id": "3926238", "url": "http://176.65.139.160/x86", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:34 UTC", "discovered_at": "2026-10-01T11:58:34.000Z" }, { "id": 146712, "urlhaus_id": "3926237", "url": "http://176.65.139.160/pid.i686", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:34 UTC", "discovered_at": "2026-10-01T11:58:34.000Z" }, { "id": 146711, "urlhaus_id": "3926236", "url": "http://176.65.139.160/pid.mipsel", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, CoinMiner, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:34 UTC", "discovered_at": "2026-10-01T11:58:34.000Z" }, { "id": 146715, "urlhaus_id": "3926235", "url": "http://176.65.139.160/pid.arm", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:33 UTC", "discovered_at": "2026-10-01T11:58:33.000Z" }, { "id": 146714, "urlhaus_id": "3926234", "url": "http://176.65.139.160/pid.x86_64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:33 UTC", "discovered_at": "2026-10-01T11:58:33.000Z" }, { "id": 146717, "urlhaus_id": "3926233", "url": "http://176.65.139.160/pid.arm8", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:32 UTC", "discovered_at": "2026-10-01T11:58:32.000Z" }, { "id": 146716, "urlhaus_id": "3926232", "url": "http://176.65.139.160/pid.arm7", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:58:32 UTC", "discovered_at": "2026-10-01T11:58:32.000Z" }, { "id": 146727, "urlhaus_id": "3926231", "url": "http://176.65.139.160/cnc", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146726, "urlhaus_id": "3926230", "url": "http://176.65.139.160/aarch64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146725, "urlhaus_id": "3926229", "url": "http://176.65.139.160/pid.arm5", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146724, "urlhaus_id": "3926228", "url": "http://176.65.139.160/mipsel", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146723, "urlhaus_id": "3926227", "url": "http://176.65.139.160/armv5l", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146722, "urlhaus_id": "3926226", "url": "http://176.65.139.160/mips", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146721, "urlhaus_id": "3926225", "url": "http://176.65.139.160/armv6l", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146720, "urlhaus_id": "3926224", "url": "http://176.65.139.160/pid.aarch64", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146719, "urlhaus_id": "3926223", "url": "http://176.65.139.160/armv7l", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146718, "urlhaus_id": "3926222", "url": "http://176.65.139.160/arm", "host": "176.65.139.160", "host_ip": "176.65.139.160", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-160, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:57:32 UTC", "discovered_at": "2026-10-01T11:57:32.000Z" }, { "id": 146728, "urlhaus_id": "3926221", "url": "http://94.154.43.201/iran.m68k", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:31 UTC", "discovered_at": "2026-10-01T11:54:31.000Z" }, { "id": 146730, "urlhaus_id": "3926220", "url": "http://94.154.43.201/iran.mips", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:29 UTC", "discovered_at": "2026-10-01T11:54:29.000Z" }, { "id": 146729, "urlhaus_id": "3926219", "url": "http://94.154.43.201/iran.armv5l", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:29 UTC", "discovered_at": "2026-10-01T11:54:29.000Z" }, { "id": 146736, "urlhaus_id": "3926218", "url": "http://94.154.43.201/iran.armv6l", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:23 UTC", "discovered_at": "2026-10-01T11:54:23.000Z" }, { "id": 146735, "urlhaus_id": "3926217", "url": "http://94.154.43.201/iran.aarch64", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:23 UTC", "discovered_at": "2026-10-01T11:54:23.000Z" }, { "id": 146734, "urlhaus_id": "3926216", "url": "http://94.154.43.201/iran.mipsel", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:23 UTC", "discovered_at": "2026-10-01T11:54:23.000Z" }, { "id": 146733, "urlhaus_id": "3926215", "url": "http://94.154.43.201/iran.armv4l", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:23 UTC", "discovered_at": "2026-10-01T11:54:23.000Z" }, { "id": 146732, "urlhaus_id": "3926214", "url": "http://94.154.43.100/eclipse.armv7l", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:23 UTC", "discovered_at": "2026-10-01T11:54:23.000Z" }, { "id": 146731, "urlhaus_id": "3926213", "url": "http://94.154.43.201/iran.powerpc", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:54:23 UTC", "discovered_at": "2026-10-01T11:54:23.000Z" }, { "id": 146737, "urlhaus_id": "3926212", "url": "http://94.154.43.201/iran.sparc", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:28 UTC", "discovered_at": "2026-10-01T11:53:28.000Z" }, { "id": 146739, "urlhaus_id": "3926211", "url": "http://94.154.43.201/iran.i486", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:25 UTC", "discovered_at": "2026-10-01T11:53:25.000Z" }, { "id": 146738, "urlhaus_id": "3926210", "url": "http://94.154.43.100/eclipse.i586", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:25 UTC", "discovered_at": "2026-10-01T11:53:25.000Z" }, { "id": 146745, "urlhaus_id": "3926209", "url": "http://94.154.43.100/eclipse.armv6l", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:24 UTC", "discovered_at": "2026-10-01T11:53:24.000Z" }, { "id": 146744, "urlhaus_id": "3926208", "url": "http://94.154.43.201/iran.arc", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:24 UTC", "discovered_at": "2026-10-01T11:53:24.000Z" }, { "id": 146743, "urlhaus_id": "3926207", "url": "http://94.154.43.201/iran.x86_64", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:24 UTC", "discovered_at": "2026-10-01T11:53:24.000Z" }, { "id": 146742, "urlhaus_id": "3926206", "url": "http://94.154.43.201/cat.sh", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:24 UTC", "discovered_at": "2026-10-01T11:53:24.000Z" }, { "id": 146741, "urlhaus_id": "3926205", "url": "http://94.154.43.201/iran.sh4", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:24 UTC", "discovered_at": "2026-10-01T11:53:24.000Z" }, { "id": 146740, "urlhaus_id": "3926204", "url": "http://94.154.43.201/iran.armv7l", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:24 UTC", "discovered_at": "2026-10-01T11:53:24.000Z" }, { "id": 146746, "urlhaus_id": "3926203", "url": "http://94.154.43.201/iran.mipsrouter", "host": "94.154.43.201", "host_ip": "94.154.43.201", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-201, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:53:23 UTC", "discovered_at": "2026-10-01T11:53:23.000Z" }, { "id": 146747, "urlhaus_id": "3926202", "url": "http://94.154.43.100/eclipse.mipsel", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:52:22 UTC", "discovered_at": "2026-10-01T11:52:22.000Z" }, { "id": 146748, "urlhaus_id": "3926201", "url": "http://94.154.43.100/eclipse.x86_64", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:26 UTC", "discovered_at": "2026-10-01T11:51:26.000Z" }, { "id": 146751, "urlhaus_id": "3926200", "url": "http://94.154.43.100/eclipse.mips", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:25 UTC", "discovered_at": "2026-10-01T11:51:25.000Z" }, { "id": 146750, "urlhaus_id": "3926199", "url": "http://94.154.43.100/eclipse.armv4l", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:25 UTC", "discovered_at": "2026-10-01T11:51:25.000Z" }, { "id": 146749, "urlhaus_id": "3926198", "url": "http://94.154.43.100/eclipse.sh4", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:25 UTC", "discovered_at": "2026-10-01T11:51:25.000Z" }, { "id": 146755, "urlhaus_id": "3926197", "url": "http://94.154.43.100/eclipse.i686", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:22 UTC", "discovered_at": "2026-10-01T11:51:22.000Z" }, { "id": 146754, "urlhaus_id": "3926196", "url": "http://94.154.43.100/eclipse.m68k", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:22 UTC", "discovered_at": "2026-10-01T11:51:22.000Z" }, { "id": 146753, "urlhaus_id": "3926195", "url": "http://94.154.43.100/eclipse.armv5l", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:22 UTC", "discovered_at": "2026-10-01T11:51:22.000Z" }, { "id": 146752, "urlhaus_id": "3926194", "url": "http://94.154.43.100/eclipse.powerpc", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, elf, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:22 UTC", "discovered_at": "2026-10-01T11:51:22.000Z" }, { "id": 146756, "urlhaus_id": "3926193", "url": "http://94.154.43.100/eclipse.sh", "host": "94.154.43.100", "host_ip": "94.154.43.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-100, sh, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:51:20 UTC", "discovered_at": "2026-10-01T11:51:20.000Z" }, { "id": 146757, "urlhaus_id": "3926192", "url": "http://42.234.206.30:55524/i", "host": "42.234.206.30", "host_ip": "42.234.206.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 11:47:13 UTC", "discovered_at": "2026-10-01T11:47:13.000Z" }, { "id": 146758, "urlhaus_id": "3926191", "url": "http://112.237.51.216:33695/i", "host": "112.237.51.216", "host_ip": "112.237.51.216", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 11:46:32 UTC", "discovered_at": "2026-10-01T11:46:32.000Z" }, { "id": 146759, "urlhaus_id": "3926190", "url": "http://182.119.58.161:53866/i", "host": "182.119.58.161", "host_ip": "182.119.58.161", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 11:46:12 UTC", "discovered_at": "2026-10-01T11:46:12.000Z" }, { "id": 146762, "urlhaus_id": "3926189", "url": "http://176.65.139.219/mipsle", "host": "176.65.139.219", "host_ip": "176.65.139.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-219, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:42:24 UTC", "discovered_at": "2026-10-01T11:42:24.000Z" }, { "id": 146761, "urlhaus_id": "3926188", "url": "http://176.65.139.219/arm64", "host": "176.65.139.219", "host_ip": "176.65.139.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-219, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:42:24 UTC", "discovered_at": "2026-10-01T11:42:24.000Z" }, { "id": 146760, "urlhaus_id": "3926187", "url": "http://176.65.139.219/amd64", "host": "176.65.139.219", "host_ip": "176.65.139.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-219, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:42:24 UTC", "discovered_at": "2026-10-01T11:42:24.000Z" }, { "id": 146763, "urlhaus_id": "3926186", "url": "http://176.65.139.219/bot.exe", "host": "176.65.139.219", "host_ip": "176.65.139.219", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-219, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:42:11 UTC", "discovered_at": "2026-10-01T11:42:11.000Z" }, { "id": 146764, "urlhaus_id": "3926185", "url": "http://176.65.139.219/bins.sh", "host": "176.65.139.219", "host_ip": "176.65.139.219", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "176-65-139-219, sh, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:41:21 UTC", "discovered_at": "2026-10-01T11:41:21.000Z" }, { "id": 146776, "urlhaus_id": "3926184", "url": "http://176.65.139.35/hiddenbin/mips", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146775, "urlhaus_id": "3926183", "url": "http://176.65.139.35/hiddenbin/arm", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146774, "urlhaus_id": "3926182", "url": "http://176.65.139.35/hiddenbin/x86_64", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146773, "urlhaus_id": "3926181", "url": "http://176.65.139.35/hiddenbin/arm6", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146772, "urlhaus_id": "3926180", "url": "http://176.65.139.35/hiddenbin/arc", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146771, "urlhaus_id": "3926179", "url": "http://176.65.139.35/hiddenbin/arm7", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146770, "urlhaus_id": "3926178", "url": "http://176.65.139.35/hiddenbin/x86", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146769, "urlhaus_id": "3926177", "url": "http://176.65.139.35/hiddenbin/arm5", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146768, "urlhaus_id": "3926176", "url": "http://176.65.139.35/hiddenbin/m68k", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146767, "urlhaus_id": "3926175", "url": "http://176.65.139.35/hiddenbin/sh4", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146766, "urlhaus_id": "3926174", "url": "http://176.65.139.35/hiddenbin/i686", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146765, "urlhaus_id": "3926173", "url": "http://176.65.139.35/hiddenbin/ppc", "host": "176.65.139.35", "host_ip": "176.65.139.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "176-65-139-35, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:40:21 UTC", "discovered_at": "2026-10-01T11:40:21.000Z" }, { "id": 146778, "urlhaus_id": "3926172", "url": "http://94.154.43.34/mipsle", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:38:25 UTC", "discovered_at": "2026-10-01T11:38:25.000Z" }, { "id": 146777, "urlhaus_id": "3926171", "url": "http://94.154.43.34/mips", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:38:25 UTC", "discovered_at": "2026-10-01T11:38:25.000Z" }, { "id": 146779, "urlhaus_id": "3926170", "url": "http://94.154.43.34/x86", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:38:20 UTC", "discovered_at": "2026-10-01T11:38:20.000Z" }, { "id": 146781, "urlhaus_id": "3926169", "url": "http://94.154.43.34/arm6", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:27 UTC", "discovered_at": "2026-10-01T11:37:27.000Z" }, { "id": 146780, "urlhaus_id": "3926168", "url": "http://94.154.43.34/armv7l", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:27 UTC", "discovered_at": "2026-10-01T11:37:27.000Z" }, { "id": 146787, "urlhaus_id": "3926167", "url": "http://94.154.43.34/android_arm64", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:21 UTC", "discovered_at": "2026-10-01T11:37:21.000Z" }, { "id": 146786, "urlhaus_id": "3926166", "url": "http://94.154.43.34/i386", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:21 UTC", "discovered_at": "2026-10-01T11:37:21.000Z" }, { "id": 146785, "urlhaus_id": "3926165", "url": "http://94.154.43.34/amd64", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:21 UTC", "discovered_at": "2026-10-01T11:37:21.000Z" }, { "id": 146784, "urlhaus_id": "3926164", "url": "http://94.154.43.34/arm", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:21 UTC", "discovered_at": "2026-10-01T11:37:21.000Z" }, { "id": 146783, "urlhaus_id": "3926163", "url": "http://94.154.43.34/arm64", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:21 UTC", "discovered_at": "2026-10-01T11:37:21.000Z" }, { "id": 146782, "urlhaus_id": "3926162", "url": "http://94.154.43.34/arm5", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, elf, mirai, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:21 UTC", "discovered_at": "2026-10-01T11:37:21.000Z" }, { "id": 146788, "urlhaus_id": "3926161", "url": "http://94.154.43.34/bins.sh", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, mirai, sh, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:19 UTC", "discovered_at": "2026-10-01T11:37:19.000Z" }, { "id": 146789, "urlhaus_id": "3926160", "url": "http://94.154.43.34/bot.exe", "host": "94.154.43.34", "host_ip": "94.154.43.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "94-154-43-34, exe, ua-wget", "last_online": null, "first_seen": "2026-10-01 11:37:13 UTC", "discovered_at": "2026-10-01T11:37:13.000Z" }, { "id": 146791, "urlhaus_id": "3926159", "url": "http://175.31.228.93:38011/i", "host": "175.31.228.93", "host_ip": "175.31.228.93", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 11:32:11 UTC", "discovered_at": "2026-10-01T11:32:11.000Z" }, { "id": 146790, "urlhaus_id": "3926158", "url": "http://42.180.248.244:60748/bin.sh", "host": "42.180.248.244", "host_ip": "42.180.248.244", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 11:32:11 UTC", "discovered_at": "2026-10-01T11:32:11.000Z" }, { "id": 146792, "urlhaus_id": "3926157", "url": "http://113.221.96.223:34810/i", "host": "113.221.96.223", "host_ip": "113.221.96.223", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 11:31:16 UTC", "discovered_at": "2026-10-01T11:31:16.000Z" }, { "id": 146793, "urlhaus_id": "3926156", "url": "http://42.230.219.48:36307/i", "host": "42.230.219.48", "host_ip": "42.230.219.48", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 11:17:14 UTC", "discovered_at": "2026-10-01T11:17:14.000Z" }, { "id": 146797, "urlhaus_id": "3926155", "url": "http://154.223.128.222:34539/i", "host": "154.223.128.222", "host_ip": "154.223.128.222", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 11:17:13 UTC", "discovered_at": "2026-10-01T11:17:13.000Z" }, { "id": 146796, "urlhaus_id": "3926154", "url": "http://103.87.194.116:36159/i", "host": "103.87.194.116", "host_ip": "103.87.194.116", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 11:17:13 UTC", "discovered_at": "2026-10-01T11:17:13.000Z" }, { "id": 146795, "urlhaus_id": "3926153", "url": "http://115.55.232.157:56561/bin.sh", "host": "115.55.232.157", "host_ip": "115.55.232.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 11:17:13 UTC", "discovered_at": "2026-10-01T11:17:13.000Z" }, { "id": 146794, "urlhaus_id": "3926152", "url": "http://60.23.239.198:53588/i", "host": "60.23.239.198", "host_ip": "60.23.239.198", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 11:17:13 UTC", "discovered_at": "2026-10-01T11:17:13.000Z" }, { "id": 146798, "urlhaus_id": "3926151", "url": "http://115.56.156.34:45390/bin.sh", "host": "115.56.156.34", "host_ip": "115.56.156.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 11:13:21 UTC", "discovered_at": "2026-10-01T11:13:21.000Z" }, { "id": 146799, "urlhaus_id": "3926150", "url": "http://91.218.183.174:443/0x/cls", "host": "91.218.183.174", "host_ip": "91.218.183.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "DPRK", "last_online": null, "first_seen": "2026-10-01 11:06:08 UTC", "discovered_at": "2026-10-01T11:06:08.000Z" }, { "id": 146800, "urlhaus_id": "3926149", "url": "https://cdn.discordapp.com/attachments/586400531312934913/1555171552734085201/bundle.zip?ex=6abf8ddf&is=6abe3c5f&hm=1af2de5aa606082d72d65a9b2146d14d8cc379d2ba66a1527da0638e01fb992f&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-01 11:05:38 UTC", "discovered_at": "2026-10-01T11:05:38.000Z" }, { "id": 146801, "urlhaus_id": "3926148", "url": "http://5.189.165.10:8888/x64", "host": "5.189.165.10", "host_ip": "5.189.165.10", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "docker, elf, mirai", "last_online": null, "first_seen": "2026-10-01 11:05:24 UTC", "discovered_at": "2026-10-01T11:05:24.000Z" }, { "id": 146803, "urlhaus_id": "3926147", "url": "http://91.218.183.174:443/0x/ls", "host": "91.218.183.174", "host_ip": "91.218.183.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "DPRK", "last_online": null, "first_seen": "2026-10-01 11:05:14 UTC", "discovered_at": "2026-10-01T11:05:14.000Z" }, { "id": 146802, "urlhaus_id": "3926146", "url": "http://91.218.183.174:443/0x/js", "host": "91.218.183.174", "host_ip": "91.218.183.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "DPRK", "last_online": null, "first_seen": "2026-10-01 11:05:14 UTC", "discovered_at": "2026-10-01T11:05:14.000Z" }, { "id": 146804, "urlhaus_id": "3926145", "url": "http://196.189.198.173:53345/bin.sh", "host": "196.189.198.173", "host_ip": "196.189.198.173", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 11:02:22 UTC", "discovered_at": "2026-10-01T11:02:22.000Z" }, { "id": 146806, "urlhaus_id": "3926144", "url": "http://125.162.25.238:55811/i", "host": "125.162.25.238", "host_ip": "125.162.25.238", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 11:02:10 UTC", "discovered_at": "2026-10-01T11:02:10.000Z" }, { "id": 146805, "urlhaus_id": "3926143", "url": "http://61.179.88.81:59819/i", "host": "61.179.88.81", "host_ip": "61.179.88.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 11:02:10 UTC", "discovered_at": "2026-10-01T11:02:10.000Z" }, { "id": 146807, "urlhaus_id": "3926142", "url": "http://124.95.22.94:46490/i", "host": "124.95.22.94", "host_ip": "124.95.22.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 11:02:09 UTC", "discovered_at": "2026-10-01T11:02:09.000Z" }, { "id": 146808, "urlhaus_id": "3926141", "url": "http://115.52.236.89:59755/i", "host": "115.52.236.89", "host_ip": "115.52.236.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 11:01:17 UTC", "discovered_at": "2026-10-01T11:01:17.000Z" }, { "id": 146809, "urlhaus_id": "3926140", "url": "http://123.13.3.11:49890/bin.sh", "host": "123.13.3.11", "host_ip": "123.13.3.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 11:01:16 UTC", "discovered_at": "2026-10-01T11:01:16.000Z" }, { "id": 146810, "urlhaus_id": "3926139", "url": "http://42.234.206.30:55524/bin.sh", "host": "42.234.206.30", "host_ip": "42.234.206.30", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:47:11 UTC", "discovered_at": "2026-10-01T10:47:11.000Z" }, { "id": 146811, "urlhaus_id": "3926138", "url": "http://163.142.87.211:44069/i", "host": "163.142.87.211", "host_ip": "163.142.87.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 10:47:10 UTC", "discovered_at": "2026-10-01T10:47:10.000Z" }, { "id": 146812, "urlhaus_id": "3926137", "url": "http://42.57.39.28:34929/i", "host": "42.57.39.28", "host_ip": "42.57.39.28", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 10:47:09 UTC", "discovered_at": "2026-10-01T10:47:09.000Z" }, { "id": 146813, "urlhaus_id": "3926136", "url": "http://99.39.251.174:47147/i", "host": "99.39.251.174", "host_ip": "99.39.251.174", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 10:47:08 UTC", "discovered_at": "2026-10-01T10:47:08.000Z" }, { "id": 146815, "urlhaus_id": "3926135", "url": "http://115.52.236.89:59755/bin.sh", "host": "115.52.236.89", "host_ip": "115.52.236.89", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:46:14 UTC", "discovered_at": "2026-10-01T10:46:14.000Z" }, { "id": 146814, "urlhaus_id": "3926134", "url": "http://125.41.247.56:43423/i", "host": "125.41.247.56", "host_ip": "125.41.247.56", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:46:14 UTC", "discovered_at": "2026-10-01T10:46:14.000Z" }, { "id": 146816, "urlhaus_id": "3926133", "url": "http://115.56.156.34:45390/i", "host": "115.56.156.34", "host_ip": "115.56.156.34", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 10:42:26 UTC", "discovered_at": "2026-10-01T10:42:26.000Z" }, { "id": 146818, "urlhaus_id": "3926132", "url": "http://59.96.138.46:52546/bin.sh", "host": "59.96.138.46", "host_ip": "59.96.138.46", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:32:13 UTC", "discovered_at": "2026-10-01T10:32:13.000Z" }, { "id": 146817, "urlhaus_id": "3926131", "url": "http://110.136.50.184:38922/i", "host": "110.136.50.184", "host_ip": "110.136.50.184", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 10:32:13 UTC", "discovered_at": "2026-10-01T10:32:13.000Z" }, { "id": 146820, "urlhaus_id": "3926130", "url": "http://42.235.102.210:39456/i", "host": "42.235.102.210", "host_ip": "42.235.102.210", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:32:12 UTC", "discovered_at": "2026-10-01T10:32:12.000Z" }, { "id": 146819, "urlhaus_id": "3926129", "url": "http://36.97.200.35:56210/i", "host": "36.97.200.35", "host_ip": "36.97.200.35", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 10:32:12 UTC", "discovered_at": "2026-10-01T10:32:12.000Z" }, { "id": 146821, "urlhaus_id": "3926128", "url": "http://42.238.246.87:60448/i", "host": "42.238.246.87", "host_ip": "42.238.246.87", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 10:17:09 UTC", "discovered_at": "2026-10-01T10:17:09.000Z" }, { "id": 146822, "urlhaus_id": "3926127", "url": "http://122.241.89.11:35340/i", "host": "122.241.89.11", "host_ip": "122.241.89.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 10:16:16 UTC", "discovered_at": "2026-10-01T10:16:16.000Z" }, { "id": 146823, "urlhaus_id": "3926126", "url": "http://115.58.91.2:54820/i", "host": "115.58.91.2", "host_ip": "115.58.91.2", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:16:15 UTC", "discovered_at": "2026-10-01T10:16:15.000Z" }, { "id": 146824, "urlhaus_id": "3926125", "url": "http://59.58.115.103:56313/bin.sh", "host": "59.58.115.103", "host_ip": "59.58.115.103", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 10:06:29 UTC", "discovered_at": "2026-10-01T10:06:29.000Z" }, { "id": 146826, "urlhaus_id": "3926124", "url": "http://182.126.245.143:34478/i", "host": "182.126.245.143", "host_ip": "182.126.245.143", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:02:13 UTC", "discovered_at": "2026-10-01T10:02:13.000Z" }, { "id": 146825, "urlhaus_id": "3926123", "url": "http://42.235.102.210:39456/bin.sh", "host": "42.235.102.210", "host_ip": "42.235.102.210", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:02:13 UTC", "discovered_at": "2026-10-01T10:02:13.000Z" }, { "id": 146830, "urlhaus_id": "3926122", "url": "http://182.124.76.75:40805/i", "host": "182.124.76.75", "host_ip": "182.124.76.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 10:02:12 UTC", "discovered_at": "2026-10-01T10:02:12.000Z" }, { "id": 146829, "urlhaus_id": "3926121", "url": "http://42.238.246.87:60448/bin.sh", "host": "42.238.246.87", "host_ip": "42.238.246.87", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 10:02:12 UTC", "discovered_at": "2026-10-01T10:02:12.000Z" }, { "id": 146828, "urlhaus_id": "3926120", "url": "http://125.47.34.4:56861/i", "host": "125.47.34.4", "host_ip": "125.47.34.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:02:12 UTC", "discovered_at": "2026-10-01T10:02:12.000Z" }, { "id": 146827, "urlhaus_id": "3926119", "url": "http://123.7.221.8:50883/i", "host": "123.7.221.8", "host_ip": "123.7.221.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 10:02:12 UTC", "discovered_at": "2026-10-01T10:02:12.000Z" }, { "id": 146831, "urlhaus_id": "3926118", "url": "http://125.47.34.4:56861/bin.sh", "host": "125.47.34.4", "host_ip": "125.47.34.4", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 09:59:23 UTC", "discovered_at": "2026-10-01T09:59:23.000Z" }, { "id": 146832, "urlhaus_id": "3926117", "url": "http://123.7.221.8:50883/bin.sh", "host": "123.7.221.8", "host_ip": "123.7.221.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:47:13 UTC", "discovered_at": "2026-10-01T09:47:13.000Z" }, { "id": 146836, "urlhaus_id": "3926116", "url": "http://123.13.3.11:49890/i", "host": "123.13.3.11", "host_ip": "123.13.3.11", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:46:14 UTC", "discovered_at": "2026-10-01T09:46:14.000Z" }, { "id": 146835, "urlhaus_id": "3926115", "url": "http://115.48.140.54:34447/i", "host": "115.48.140.54", "host_ip": "115.48.140.54", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:46:14 UTC", "discovered_at": "2026-10-01T09:46:14.000Z" }, { "id": 146834, "urlhaus_id": "3926114", "url": "http://42.177.162.29:23509/i", "host": "42.177.162.29", "host_ip": "42.177.162.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 09:46:14 UTC", "discovered_at": "2026-10-01T09:46:14.000Z" }, { "id": 146833, "urlhaus_id": "3926113", "url": "http://42.177.162.29:23509/bin.sh", "host": "42.177.162.29", "host_ip": "42.177.162.29", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 09:46:14 UTC", "discovered_at": "2026-10-01T09:46:14.000Z" }, { "id": 146837, "urlhaus_id": "3926112", "url": "http://58.47.104.163:35522/bin.sh", "host": "58.47.104.163", "host_ip": "58.47.104.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:46:13 UTC", "discovered_at": "2026-10-01T09:46:13.000Z" }, { "id": 146839, "urlhaus_id": "3926111", "url": "http://182.124.76.75:40805/bin.sh", "host": "182.124.76.75", "host_ip": "182.124.76.75", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 09:32:14 UTC", "discovered_at": "2026-10-01T09:32:14.000Z" }, { "id": 146838, "urlhaus_id": "3926110", "url": "http://110.136.40.247:33480/i", "host": "110.136.40.247", "host_ip": "110.136.40.247", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:32:14 UTC", "discovered_at": "2026-10-01T09:32:14.000Z" }, { "id": 146840, "urlhaus_id": "3926109", "url": "http://115.63.112.133:34953/i", "host": "115.63.112.133", "host_ip": "115.63.112.133", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:32:13 UTC", "discovered_at": "2026-10-01T09:32:13.000Z" }, { "id": 146843, "urlhaus_id": "3926108", "url": "http://123.11.175.208:54336/bin.sh", "host": "123.11.175.208", "host_ip": "123.11.175.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:32:12 UTC", "discovered_at": "2026-10-01T09:32:12.000Z" }, { "id": 146842, "urlhaus_id": "3926107", "url": "http://182.113.7.66:51822/i", "host": "182.113.7.66", "host_ip": "182.113.7.66", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:32:12 UTC", "discovered_at": "2026-10-01T09:32:12.000Z" }, { "id": 146841, "urlhaus_id": "3926106", "url": "http://27.215.122.212:34071/bin.sh", "host": "27.215.122.212", "host_ip": "27.215.122.212", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:32:12 UTC", "discovered_at": "2026-10-01T09:32:12.000Z" }, { "id": 146844, "urlhaus_id": "3926105", "url": "http://113.206.4.6:35021/bin.sh", "host": "113.206.4.6", "host_ip": "113.206.4.6", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 09:30:20 UTC", "discovered_at": "2026-10-01T09:30:20.000Z" }, { "id": 146845, "urlhaus_id": "3926104", "url": "http://185.233.94.151:54854/i", "host": "185.233.94.151", "host_ip": "185.233.94.151", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 09:22:18 UTC", "discovered_at": "2026-10-01T09:22:18.000Z" }, { "id": 146846, "urlhaus_id": "3926103", "url": "http://196.191.233.24:40339/bin.sh", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 09:18:25 UTC", "discovered_at": "2026-10-01T09:18:25.000Z" }, { "id": 146847, "urlhaus_id": "3926102", "url": "http://221.194.101.213:45123/i", "host": "221.194.101.213", "host_ip": "221.194.101.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:17:21 UTC", "discovered_at": "2026-10-01T09:17:21.000Z" }, { "id": 146848, "urlhaus_id": "3926101", "url": "http://59.97.249.42:34403/i", "host": "59.97.249.42", "host_ip": "59.97.249.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:17:12 UTC", "discovered_at": "2026-10-01T09:17:12.000Z" }, { "id": 146850, "urlhaus_id": "3926100", "url": "http://42.242.128.210:37927/i", "host": "42.242.128.210", "host_ip": "42.242.128.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:17:10 UTC", "discovered_at": "2026-10-01T09:17:10.000Z" }, { "id": 146849, "urlhaus_id": "3926099", "url": "http://58.21.120.161:53319/i", "host": "58.21.120.161", "host_ip": "58.21.120.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:17:10 UTC", "discovered_at": "2026-10-01T09:17:10.000Z" }, { "id": 146852, "urlhaus_id": "3926098", "url": "http://115.63.112.133:34953/bin.sh", "host": "115.63.112.133", "host_ip": "115.63.112.133", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:02:13 UTC", "discovered_at": "2026-10-01T09:02:13.000Z" }, { "id": 146851, "urlhaus_id": "3926097", "url": "http://115.55.49.174:46425/i", "host": "115.55.49.174", "host_ip": "115.55.49.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:02:13 UTC", "discovered_at": "2026-10-01T09:02:13.000Z" }, { "id": 146853, "urlhaus_id": "3926096", "url": "http://61.52.159.237:45418/i", "host": "61.52.159.237", "host_ip": "61.52.159.237", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 09:02:12 UTC", "discovered_at": "2026-10-01T09:02:12.000Z" }, { "id": 146854, "urlhaus_id": "3926095", "url": "http://37.26.86.216:53452/i", "host": "37.26.86.216", "host_ip": "37.26.86.216", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 09:02:11 UTC", "discovered_at": "2026-10-01T09:02:11.000Z" }, { "id": 146855, "urlhaus_id": "3926094", "url": "http://115.50.105.81:59352/bin.sh", "host": "115.50.105.81", "host_ip": "115.50.105.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 08:54:14 UTC", "discovered_at": "2026-10-01T08:54:14.000Z" }, { "id": 146856, "urlhaus_id": "3926093", "url": "http://82.54.132.207:39054/i", "host": "82.54.132.207", "host_ip": "82.54.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 08:51:22 UTC", "discovered_at": "2026-10-01T08:51:22.000Z" }, { "id": 146858, "urlhaus_id": "3926092", "url": "http://58.21.120.161:53319/bin.sh", "host": "58.21.120.161", "host_ip": "58.21.120.161", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 08:47:10 UTC", "discovered_at": "2026-10-01T08:47:10.000Z" }, { "id": 146857, "urlhaus_id": "3926091", "url": "http://115.55.232.157:56561/i", "host": "115.55.232.157", "host_ip": "115.55.232.157", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 08:47:10 UTC", "discovered_at": "2026-10-01T08:47:10.000Z" }, { "id": 146859, "urlhaus_id": "3926090", "url": "http://185.78.93.213:55040/bin.sh", "host": "185.78.93.213", "host_ip": "185.78.93.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 08:46:15 UTC", "discovered_at": "2026-10-01T08:46:15.000Z" }, { "id": 146861, "urlhaus_id": "3926089", "url": "http://125.78.41.62:47558/bin.sh", "host": "125.78.41.62", "host_ip": "125.78.41.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 08:46:14 UTC", "discovered_at": "2026-10-01T08:46:14.000Z" }, { "id": 146860, "urlhaus_id": "3926088", "url": "http://125.78.41.62:47558/i", "host": "125.78.41.62", "host_ip": "125.78.41.62", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 08:46:14 UTC", "discovered_at": "2026-10-01T08:46:14.000Z" }, { "id": 146862, "urlhaus_id": "3926087", "url": "http://103.87.194.109:46503/i", "host": "103.87.194.109", "host_ip": "103.87.194.109", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 08:46:11 UTC", "discovered_at": "2026-10-01T08:46:11.000Z" }, { "id": 146863, "urlhaus_id": "3926086", "url": "http://182.127.124.213:58579/bin.sh", "host": "182.127.124.213", "host_ip": "182.127.124.213", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 08:43:22 UTC", "discovered_at": "2026-10-01T08:43:22.000Z" }, { "id": 146864, "urlhaus_id": "3926085", "url": "http://210.208.110.21:55702/bin.sh", "host": "210.208.110.21", "host_ip": "210.208.110.21", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 08:40:31 UTC", "discovered_at": "2026-10-01T08:40:31.000Z" }, { "id": 146865, "urlhaus_id": "3926084", "url": "http://51.38.247.67:8081", "host": "51.38.247.67", "host_ip": "51.38.247.67", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "SnakeKeylogger", "last_online": null, "first_seen": "2026-10-01 08:40:29 UTC", "discovered_at": "2026-10-01T08:40:29.000Z" }, { "id": 146866, "urlhaus_id": "3926083", "url": "http://125.41.3.210:38324/bin.sh", "host": "125.41.3.210", "host_ip": "125.41.3.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 08:39:22 UTC", "discovered_at": "2026-10-01T08:39:22.000Z" }, { "id": 146868, "urlhaus_id": "3926082", "url": "https://raw.githubusercontent.com/dsteru3421/4f77-bdc8-7e8087412ccf/refs/heads/main/464cf7ac-29d9-4a5a-a7c0", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 08:38:13 UTC", "discovered_at": "2026-10-01T08:38:13.000Z" }, { "id": 146867, "urlhaus_id": "3926081", "url": "https://raw.githubusercontent.com/dsteru3421/4f77-bdc8-7e8087412ccf/refs/heads/main/8f16-efc0e3092243", "host": "raw.githubusercontent.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ascii, powershell, ps1", "last_online": null, "first_seen": "2026-10-01 08:38:13 UTC", "discovered_at": "2026-10-01T08:38:13.000Z" }, { "id": 146869, "urlhaus_id": "3926080", "url": "http://115.48.41.100:55799/i", "host": "115.48.41.100", "host_ip": "115.48.41.100", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 08:32:11 UTC", "discovered_at": "2026-10-01T08:32:11.000Z" }, { "id": 146870, "urlhaus_id": "3926079", "url": "http://115.55.49.174:46425/bin.sh", "host": "115.55.49.174", "host_ip": "115.55.49.174", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 08:32:10 UTC", "discovered_at": "2026-10-01T08:32:10.000Z" }, { "id": 146871, "urlhaus_id": "3926078", "url": "http://36.88.136.194:54925/i", "host": "36.88.136.194", "host_ip": "36.88.136.194", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 08:27:26 UTC", "discovered_at": "2026-10-01T08:27:26.000Z" }, { "id": 146872, "urlhaus_id": "3926077", "url": "http://82.54.132.207:39054/bin.sh", "host": "82.54.132.207", "host_ip": "82.54.132.207", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, arm, elf, mirai, Mozi", "last_online": null, "first_seen": "2026-10-01 08:25:23 UTC", "discovered_at": "2026-10-01T08:25:23.000Z" }, { "id": 146873, "urlhaus_id": "3926076", "url": "http://58.47.104.232:46693/bin.sh", "host": "58.47.104.232", "host_ip": "58.47.104.232", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 08:16:13 UTC", "discovered_at": "2026-10-01T08:16:13.000Z" }, { "id": 146877, "urlhaus_id": "3926075", "url": "http://115.49.40.27:47638/i", "host": "115.49.40.27", "host_ip": "115.49.40.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 08:16:12 UTC", "discovered_at": "2026-10-01T08:16:12.000Z" }, { "id": 146876, "urlhaus_id": "3926074", "url": "http://123.14.32.129:52698/i", "host": "123.14.32.129", "host_ip": "123.14.32.129", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 08:16:12 UTC", "discovered_at": "2026-10-01T08:16:12.000Z" }, { "id": 146875, "urlhaus_id": "3926073", "url": "http://115.55.60.81:59252/bin.sh", "host": "115.55.60.81", "host_ip": "115.55.60.81", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 08:16:12 UTC", "discovered_at": "2026-10-01T08:16:12.000Z" }, { "id": 146874, "urlhaus_id": "3926072", "url": "http://115.61.118.253:42001/i", "host": "115.61.118.253", "host_ip": "115.61.118.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 08:16:12 UTC", "discovered_at": "2026-10-01T08:16:12.000Z" }, { "id": 146879, "urlhaus_id": "3926071", "url": "http://42.52.75.211:45783/i", "host": "42.52.75.211", "host_ip": "42.52.75.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 08:01:14 UTC", "discovered_at": "2026-10-01T08:01:14.000Z" }, { "id": 146878, "urlhaus_id": "3926070", "url": "http://42.52.75.211:45783/bin.sh", "host": "42.52.75.211", "host_ip": "42.52.75.211", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 08:01:14 UTC", "discovered_at": "2026-10-01T08:01:14.000Z" }, { "id": 146880, "urlhaus_id": "3926069", "url": "http://59.97.255.72:49326/i", "host": "59.97.255.72", "host_ip": "59.97.255.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 08:01:13 UTC", "discovered_at": "2026-10-01T08:01:13.000Z" }, { "id": 146881, "urlhaus_id": "3926068", "url": "http://42.234.100.204:38961/i", "host": "42.234.100.204", "host_ip": "42.234.100.204", "url_status": "online", "online": true, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 07:53:24 UTC", "discovered_at": "2026-10-01T07:53:24.000Z" }, { "id": 146882, "urlhaus_id": "3926067", "url": "http://27.37.230.39:57988/i", "host": "27.37.230.39", "host_ip": "27.37.230.39", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 07:47:11 UTC", "discovered_at": "2026-10-01T07:47:11.000Z" }, { "id": 146883, "urlhaus_id": "3926066", "url": "http://115.59.34.247:53210/i", "host": "115.59.34.247", "host_ip": "115.59.34.247", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:45:14 UTC", "discovered_at": "2026-10-01T07:45:14.000Z" }, { "id": 146884, "urlhaus_id": "3926065", "url": "http://180.190.188.110:41166/i", "host": "180.190.188.110", "host_ip": "180.190.188.110", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 07:45:13 UTC", "discovered_at": "2026-10-01T07:45:13.000Z" }, { "id": 146887, "urlhaus_id": "3926064", "url": "http://59.97.255.72:49326/bin.sh", "host": "59.97.255.72", "host_ip": "59.97.255.72", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:31:15 UTC", "discovered_at": "2026-10-01T07:31:15.000Z" }, { "id": 146886, "urlhaus_id": "3926063", "url": "http://123.190.22.203:45590/bin.sh", "host": "123.190.22.203", "host_ip": "123.190.22.203", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 07:31:15 UTC", "discovered_at": "2026-10-01T07:31:15.000Z" }, { "id": 146885, "urlhaus_id": "3926062", "url": "http://42.237.40.206:57804/bin.sh", "host": "42.237.40.206", "host_ip": "42.237.40.206", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:31:15 UTC", "discovered_at": "2026-10-01T07:31:15.000Z" }, { "id": 146891, "urlhaus_id": "3926061", "url": "http://115.49.40.27:47638/bin.sh", "host": "115.49.40.27", "host_ip": "115.49.40.27", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:16:15 UTC", "discovered_at": "2026-10-01T07:16:15.000Z" }, { "id": 146890, "urlhaus_id": "3926060", "url": "http://105.224.32.139:48175/i", "host": "105.224.32.139", "host_ip": "105.224.32.139", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 07:16:15 UTC", "discovered_at": "2026-10-01T07:16:15.000Z" }, { "id": 146889, "urlhaus_id": "3926059", "url": "http://42.229.188.148:42206/i", "host": "42.229.188.148", "host_ip": "42.229.188.148", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:16:15 UTC", "discovered_at": "2026-10-01T07:16:15.000Z" }, { "id": 146888, "urlhaus_id": "3926058", "url": "http://115.55.216.130:42148/bin.sh", "host": "115.55.216.130", "host_ip": "115.55.216.130", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:16:15 UTC", "discovered_at": "2026-10-01T07:16:15.000Z" }, { "id": 146893, "urlhaus_id": "3926057", "url": "http://27.204.247.42:42958/i", "host": "27.204.247.42", "host_ip": "27.204.247.42", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:16:14 UTC", "discovered_at": "2026-10-01T07:16:14.000Z" }, { "id": 146892, "urlhaus_id": "3926056", "url": "http://115.61.118.253:42001/bin.sh", "host": "115.61.118.253", "host_ip": "115.61.118.253", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 07:16:14 UTC", "discovered_at": "2026-10-01T07:16:14.000Z" }, { "id": 146895, "urlhaus_id": "3926055", "url": "http://42.224.121.24:59011/i", "host": "42.224.121.24", "host_ip": "42.224.121.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:02:11 UTC", "discovered_at": "2026-10-01T07:02:11.000Z" }, { "id": 146894, "urlhaus_id": "3926054", "url": "http://219.157.17.40:54079/bin.sh", "host": "219.157.17.40", "host_ip": "219.157.17.40", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 07:02:11 UTC", "discovered_at": "2026-10-01T07:02:11.000Z" }, { "id": 146896, "urlhaus_id": "3926053", "url": "http://59.183.97.58:59725/bin.sh", "host": "59.183.97.58", "host_ip": "59.183.97.58", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:47:15 UTC", "discovered_at": "2026-10-01T06:47:15.000Z" }, { "id": 146897, "urlhaus_id": "3926052", "url": "http://47.212.193.38:54138/bin.sh", "host": "47.212.193.38", "host_ip": "47.212.193.38", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 06:47:12 UTC", "discovered_at": "2026-10-01T06:47:12.000Z" }, { "id": 146898, "urlhaus_id": "3926051", "url": "http://182.118.242.94:46786/i", "host": "182.118.242.94", "host_ip": "182.118.242.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:47:11 UTC", "discovered_at": "2026-10-01T06:47:11.000Z" }, { "id": 146899, "urlhaus_id": "3926050", "url": "http://219.157.246.193:33066/i", "host": "219.157.246.193", "host_ip": "219.157.246.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:47:10 UTC", "discovered_at": "2026-10-01T06:47:10.000Z" }, { "id": 146900, "urlhaus_id": "3926049", "url": "http://192.3.47.188/135/images_95858005050050.JPG.hta", "host": "192.3.47.188", "host_ip": "192.3.47.188", "url_status": "online", "online": true, "threat": "malware_download", "tags": "hta, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-01 06:46:14 UTC", "discovered_at": "2026-10-01T06:46:14.000Z" }, { "id": 146903, "urlhaus_id": "3926048", "url": "http://219.157.170.251:44929/i", "host": "219.157.170.251", "host_ip": "219.157.170.251", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:32:13 UTC", "discovered_at": "2026-10-01T06:32:13.000Z" }, { "id": 146902, "urlhaus_id": "3926047", "url": "http://222.138.101.8:53317/i", "host": "222.138.101.8", "host_ip": "222.138.101.8", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:32:13 UTC", "discovered_at": "2026-10-01T06:32:13.000Z" }, { "id": 146901, "urlhaus_id": "3926046", "url": "http://154.23.2.62:51257/i", "host": "154.23.2.62", "host_ip": "154.23.2.62", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:32:13 UTC", "discovered_at": "2026-10-01T06:32:13.000Z" }, { "id": 146904, "urlhaus_id": "3926045", "url": "http://175.147.89.33:42382/i", "host": "175.147.89.33", "host_ip": "175.147.89.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 06:32:12 UTC", "discovered_at": "2026-10-01T06:32:12.000Z" }, { "id": 146905, "urlhaus_id": "3926044", "url": "http://115.57.18.198:40785/i", "host": "115.57.18.198", "host_ip": "115.57.18.198", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:31:12 UTC", "discovered_at": "2026-10-01T06:31:12.000Z" }, { "id": 146906, "urlhaus_id": "3926043", "url": "http://91.92.242.236/files-129312398/files/file_6911193341ae26d7.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-01 06:25:18 UTC", "discovered_at": "2026-10-01T06:25:18.000Z" }, { "id": 146908, "urlhaus_id": "3926042", "url": "http://219.157.246.193:33066/bin.sh", "host": "219.157.246.193", "host_ip": "219.157.246.193", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:16:15 UTC", "discovered_at": "2026-10-01T06:16:15.000Z" }, { "id": 146907, "urlhaus_id": "3926041", "url": "http://123.11.175.208:54336/i", "host": "123.11.175.208", "host_ip": "123.11.175.208", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:16:15 UTC", "discovered_at": "2026-10-01T06:16:15.000Z" }, { "id": 146911, "urlhaus_id": "3926040", "url": "http://46.10.44.157:45658/i", "host": "46.10.44.157", "host_ip": "46.10.44.157", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 06:16:14 UTC", "discovered_at": "2026-10-01T06:16:14.000Z" }, { "id": 146910, "urlhaus_id": "3926039", "url": "http://46.72.77.178:8429/bin.sh", "host": "46.72.77.178", "host_ip": "46.72.77.178", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 06:16:14 UTC", "discovered_at": "2026-10-01T06:16:14.000Z" }, { "id": 146909, "urlhaus_id": "3926038", "url": "http://196.191.233.24:40339/i", "host": "196.191.233.24", "host_ip": "196.191.233.24", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 06:16:14 UTC", "discovered_at": "2026-10-01T06:16:14.000Z" }, { "id": 146913, "urlhaus_id": "3926037", "url": "http://185.166.155.141:5001/tr.bin", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "opendir", "last_online": null, "first_seen": "2026-10-01 06:06:09 UTC", "discovered_at": "2026-10-01T06:06:09.000Z" }, { "id": 146912, "urlhaus_id": "3926036", "url": "http://185.166.155.141:5001/utros.bin", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "opendir", "last_online": null, "first_seen": "2026-10-01 06:06:09 UTC", "discovered_at": "2026-10-01T06:06:09.000Z" }, { "id": 146914, "urlhaus_id": "3926035", "url": "http://185.166.155.141:5001/one.exe", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, opendir, SalatStealer", "last_online": null, "first_seen": "2026-10-01 06:05:16 UTC", "discovered_at": "2026-10-01T06:05:16.000Z" }, { "id": 146915, "urlhaus_id": "3926034", "url": "http://185.166.155.141:5001/irzfcxiywhew.exe", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, opendir, QuasarRAT", "last_online": null, "first_seen": "2026-10-01 06:05:15 UTC", "discovered_at": "2026-10-01T06:05:15.000Z" }, { "id": 146917, "urlhaus_id": "3926033", "url": "http://185.166.155.141:5001/two.exe", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, opendir", "last_online": null, "first_seen": "2026-10-01 06:05:14 UTC", "discovered_at": "2026-10-01T06:05:14.000Z" }, { "id": 146916, "urlhaus_id": "3926032", "url": "http://185.166.155.141:5001/kisa.exe", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, opendir, SheetRAT", "last_online": null, "first_seen": "2026-10-01 06:05:14 UTC", "discovered_at": "2026-10-01T06:05:14.000Z" }, { "id": 146921, "urlhaus_id": "3926031", "url": "http://185.166.155.141:5001/kis.exe", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, opendir, SheetRAT", "last_online": null, "first_seen": "2026-10-01 06:05:13 UTC", "discovered_at": "2026-10-01T06:05:13.000Z" }, { "id": 146920, "urlhaus_id": "3926030", "url": "http://185.166.155.141:5001/ufrop.exe", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, opendir, SalatStealer", "last_online": null, "first_seen": "2026-10-01 06:05:13 UTC", "discovered_at": "2026-10-01T06:05:13.000Z" }, { "id": 146919, "urlhaus_id": "3926029", "url": "http://185.166.155.141:5001/optimal.exe", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "exe, opendir, RemusStealer", "last_online": null, "first_seen": "2026-10-01 06:05:13 UTC", "discovered_at": "2026-10-01T06:05:13.000Z" }, { "id": 146918, "urlhaus_id": "3926028", "url": "http://185.166.155.141:5001/pip.bin", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "opendir", "last_online": null, "first_seen": "2026-10-01 06:05:13 UTC", "discovered_at": "2026-10-01T06:05:13.000Z" }, { "id": 146922, "urlhaus_id": "3926027", "url": "http://185.166.155.141:5001/horos.bin", "host": "185.166.155.141", "host_ip": "185.166.155.141", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "opendir", "last_online": null, "first_seen": "2026-10-01 06:04:12 UTC", "discovered_at": "2026-10-01T06:04:12.000Z" }, { "id": 146923, "urlhaus_id": "3926026", "url": "http://201.7.16.231/bins/payload.sh", "host": "201.7.16.231", "host_ip": "201.7.16.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 06:02:08 UTC", "discovered_at": "2026-10-01T06:02:08.000Z" }, { "id": 146924, "urlhaus_id": "3926025", "url": "http://222.127.55.82:43735/i", "host": "222.127.55.82", "host_ip": "222.127.55.82", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 06:01:20 UTC", "discovered_at": "2026-10-01T06:01:20.000Z" }, { "id": 146925, "urlhaus_id": "3926024", "url": "http://120.84.212.119:45721/bin.sh", "host": "120.84.212.119", "host_ip": "120.84.212.119", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 06:01:09 UTC", "discovered_at": "2026-10-01T06:01:09.000Z" }, { "id": 146927, "urlhaus_id": "3926023", "url": "http://175.147.89.33:42382/bin.sh", "host": "175.147.89.33", "host_ip": "175.147.89.33", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 06:01:08 UTC", "discovered_at": "2026-10-01T06:01:08.000Z" }, { "id": 146926, "urlhaus_id": "3926022", "url": "http://201.7.16.231/bins/dbg", "host": "201.7.16.231", "host_ip": "201.7.16.231", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 06:01:08 UTC", "discovered_at": "2026-10-01T06:01:08.000Z" }, { "id": 146928, "urlhaus_id": "3926021", "url": "http://123.13.136.149:53535/bin.sh", "host": "123.13.136.149", "host_ip": "123.13.136.149", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 06:01:07 UTC", "discovered_at": "2026-10-01T06:01:07.000Z" }, { "id": 146941, "urlhaus_id": "3926020", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxni386xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146940, "urlhaus_id": "3926019", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146939, "urlhaus_id": "3926018", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnsh4xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146938, "urlhaus_id": "3926017", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnm68kxnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146937, "urlhaus_id": "3926016", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146936, "urlhaus_id": "3926015", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146935, "urlhaus_id": "3926014", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146934, "urlhaus_id": "3926013", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnor1kxnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146933, "urlhaus_id": "3926012", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146932, "urlhaus_id": "3926011", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146931, "urlhaus_id": "3926010", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnsh2xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146930, "urlhaus_id": "3926009", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnmipsxnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146929, "urlhaus_id": "3926008", "url": "http://222.255.181.15/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "host": "222.255.181.15", "host_ip": "222.255.181.15", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ua-wget", "last_online": null, "first_seen": "2026-10-01 05:55:25 UTC", "discovered_at": "2026-10-01T05:55:25.000Z" }, { "id": 146943, "urlhaus_id": "3926007", "url": "https://drive.google.com/uc?export=download&id=1ckCcpcK-lCAKi1lGZ0tnj5yynsi6uBla", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-01 05:50:19 UTC", "discovered_at": "2026-10-01T05:50:19.000Z" }, { "id": 146942, "urlhaus_id": "3926006", "url": "https://drive.google.com/uc?export=download&id=1qjzMdGn-w0YYAgdJ6zcD7jCzqDtaokB3", "host": "drive.google.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, Encoded, GuLoader, rat, RemcosRAT", "last_online": null, "first_seen": "2026-10-01 05:50:19 UTC", "discovered_at": "2026-10-01T05:50:19.000Z" }, { "id": 146945, "urlhaus_id": "3926005", "url": "http://222.142.93.87:45263/bin.sh", "host": "222.142.93.87", "host_ip": "222.142.93.87", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 05:47:10 UTC", "discovered_at": "2026-10-01T05:47:10.000Z" }, { "id": 146944, "urlhaus_id": "3926004", "url": "http://105.186.149.113:43297/bin.sh", "host": "105.186.149.113", "host_ip": "105.186.149.113", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 05:47:10 UTC", "discovered_at": "2026-10-01T05:47:10.000Z" }, { "id": 146946, "urlhaus_id": "3926003", "url": "http://84.200.33.163/302/token.cmd", "host": "84.200.33.163", "host_ip": "84.200.33.163", "url_status": "online", "online": true, "threat": "malware_download", "tags": "ascii, bat, ua-curl", "last_online": null, "first_seen": "2026-10-01 05:40:12 UTC", "discovered_at": "2026-10-01T05:40:12.000Z" }, { "id": 146947, "urlhaus_id": "3926002", "url": "http://91.92.242.236/files-129312398/files/file_f374c4d0079d076f.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-01 05:35:11 UTC", "discovered_at": "2026-10-01T05:35:11.000Z" }, { "id": 146948, "urlhaus_id": "3926001", "url": "https://chrome.windows-browser.net/setup/downloads/ext1/ChromeSetup.exe", "host": "chrome.windows-browser.net", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "Dapato, dropper, exe", "last_online": null, "first_seen": "2026-10-01 05:34:39 UTC", "discovered_at": "2026-10-01T05:34:39.000Z" }, { "id": 146950, "urlhaus_id": "3926000", "url": "http://94.154.43.26:8080/bot-darwin-amd64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:32 UTC", "discovered_at": "2026-10-01T05:34:32.000Z" }, { "id": 146949, "urlhaus_id": "3925999", "url": "http://94.154.43.26:8080/bot-linux-arm64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:32 UTC", "discovered_at": "2026-10-01T05:34:32.000Z" }, { "id": 146951, "urlhaus_id": "3925998", "url": "https://github.com/dimdikoldu/salla/releases/download/31/31.zip", "host": "github.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-01 05:34:23 UTC", "discovered_at": "2026-10-01T05:34:23.000Z" }, { "id": 146952, "urlhaus_id": "3925997", "url": "http://115.59.233.233:39953/bin.sh", "host": "115.59.233.233", "host_ip": "115.59.233.233", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 05:34:19 UTC", "discovered_at": "2026-10-01T05:34:19.000Z" }, { "id": 146953, "urlhaus_id": "3925996", "url": "http://115.196.7.123:48161/bin.sh", "host": "115.196.7.123", "host_ip": "115.196.7.123", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 05:34:14 UTC", "discovered_at": "2026-10-01T05:34:14.000Z" }, { "id": 146954, "urlhaus_id": "3925995", "url": "https://api-willserver.phonkstyle-workers.workers.dev/board/config", "host": "api-willserver.phonkstyle-workers.workers.dev", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "vs extension", "last_online": null, "first_seen": "2026-10-01 05:34:13 UTC", "discovered_at": "2026-10-01T05:34:13.000Z" }, { "id": 146961, "urlhaus_id": "3925994", "url": "http://94.154.43.26:8080/bot-windows-amd64.exe", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:11 UTC", "discovered_at": "2026-10-01T05:34:11.000Z" }, { "id": 146960, "urlhaus_id": "3925993", "url": "http://94.154.43.26:8080/bot-darwin-arm64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:11 UTC", "discovered_at": "2026-10-01T05:34:11.000Z" }, { "id": 146959, "urlhaus_id": "3925992", "url": "http://94.154.43.26:8080/bot-openbsd-amd64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:11 UTC", "discovered_at": "2026-10-01T05:34:11.000Z" }, { "id": 146958, "urlhaus_id": "3925991", "url": "http://94.154.43.26:8080/bot-freebsd-amd64", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:11 UTC", "discovered_at": "2026-10-01T05:34:11.000Z" }, { "id": 146957, "urlhaus_id": "3925990", "url": "http://94.154.43.26:8080/bot-linux-386", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 05:34:11 UTC", "discovered_at": "2026-10-01T05:34:11.000Z" }, { "id": 146956, "urlhaus_id": "3925989", "url": "http://94.154.43.26:8080/bot-linux-arm", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:11 UTC", "discovered_at": "2026-10-01T05:34:11.000Z" }, { "id": 146955, "urlhaus_id": "3925988", "url": "http://94.154.43.26:8080/bot-windows-386.exe", "host": "94.154.43.26", "host_ip": "94.154.43.26", "url_status": "offline", "online": false, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:34:11 UTC", "discovered_at": "2026-10-01T05:34:11.000Z" }, { "id": 146962, "urlhaus_id": "3925987", "url": "http://85.192.48.80:8888/bot_x86_64", "host": "85.192.48.80", "host_ip": "85.192.48.80", "url_status": "online", "online": true, "threat": "malware_download", "tags": "elf, mirai", "last_online": null, "first_seen": "2026-10-01 05:33:12 UTC", "discovered_at": "2026-10-01T05:33:12.000Z" }, { "id": 146963, "urlhaus_id": "3925986", "url": "https://sandiegomobiletire.com/loader/agent/a75137e5a3f45aacaa1ed5259e81ad8dcbcc0c1b767d8fc46dc42d2ef548b449", "host": "sandiegomobiletire.com", "host_ip": null, "url_status": "offline", "online": false, "threat": "malware_download", "tags": "ClickFix, Loader, Mach-O, macOS", "last_online": null, "first_seen": "2026-10-01 05:33:11 UTC", "discovered_at": "2026-10-01T05:33:11.000Z" }, { "id": 146964, "urlhaus_id": "3925985", "url": "http://45.207.157.28/backdoor.sh", "host": "45.207.157.28", "host_ip": "45.207.157.28", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "downloader, sh", "last_online": null, "first_seen": "2026-10-01 05:33:10 UTC", "discovered_at": "2026-10-01T05:33:10.000Z" }, { "id": 146965, "urlhaus_id": "3925984", "url": "http://91.92.242.236/files-129312398/files/file_24ed2cf4c7e68a80.exe", "host": "91.92.242.236", "host_ip": "91.92.242.236", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "c2-monitor-auto, dropped-by-amadey", "last_online": null, "first_seen": "2026-10-01 05:33:09 UTC", "discovered_at": "2026-10-01T05:33:09.000Z" }, { "id": 146966, "urlhaus_id": "3925983", "url": "https://cdn.discordapp.com/attachments/1324384206050168936/1554961466518409328/bundle.zip?ex=6abeca37&is=6abd78b7&hm=8d91bb35ae9f64d4d217282123810c09034c8ff617046c19d9cf678781b3a9c5&", "host": "cdn.discordapp.com", "host_ip": null, "url_status": "online", "online": true, "threat": "malware_download", "tags": "IRAHook", "last_online": null, "first_seen": "2026-10-01 05:32:38 UTC", "discovered_at": "2026-10-01T05:32:38.000Z" }, { "id": 146967, "urlhaus_id": "3925982", "url": "http://60.23.239.45:46659/i", "host": "60.23.239.45", "host_ip": "60.23.239.45", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:32:18 UTC", "discovered_at": "2026-10-01T05:32:18.000Z" }, { "id": 146968, "urlhaus_id": "3925981", "url": "http://120.84.218.167:43117/i", "host": "120.84.218.167", "host_ip": "120.84.218.167", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 05:32:15 UTC", "discovered_at": "2026-10-01T05:32:15.000Z" }, { "id": 146969, "urlhaus_id": "3925980", "url": "http://124.95.22.94:46490/bin.sh", "host": "124.95.22.94", "host_ip": "124.95.22.94", "url_status": "online", "online": true, "threat": "malware_download", "tags": null, "last_online": null, "first_seen": "2026-10-01 05:32:14 UTC", "discovered_at": "2026-10-01T05:32:14.000Z" }, { "id": 146971, "urlhaus_id": "3925979", "url": "http://182.127.124.213:58579/i", "host": "182.127.124.213", "host_ip": "182.127.124.213", "url_status": "online", "online": true, "threat": "malware_download", "tags": "Mozi", "last_online": null, "first_seen": "2026-10-01 05:32:13 UTC", "discovered_at": "2026-10-01T05:32:13.000Z" }, { "id": 146970, "urlhaus_id": "3925978", "url": "http://222.93.26.143:40336/i", "host": "222.93.26.143", "host_ip": "222.93.26.143", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 05:32:13 UTC", "discovered_at": "2026-10-01T05:32:13.000Z" }, { "id": 146972, "urlhaus_id": "3925977", "url": "http://220.192.252.187:55755/bin.sh", "host": "220.192.252.187", "host_ip": "220.192.252.187", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 05:31:13 UTC", "discovered_at": "2026-10-01T05:31:13.000Z" }, { "id": 146973, "urlhaus_id": "3925976", "url": "http://59.180.137.217:55956/i", "host": "59.180.137.217", "host_ip": "59.180.137.217", "url_status": "offline", "online": false, "threat": "malware_download", "tags": "32-bit, elf, mips, Mozi", "last_online": null, "first_seen": "2026-10-01 05:27:22 UTC", "discovered_at": "2026-10-01T05:27:22.000Z" }, { "id": 146974, "urlhaus_id": "3925975", "url": "http://42.242.128.210:37927/bin.sh", "host": "42.242.128.210", "host_ip": "42.242.128.210", "url_status": "online", "online": true, "threat": "malware_download", "tags": "mirai", "last_online": null, "first_seen": "2026-10-01 05:17:26 UTC", "discovered_at": "2026-10-01T05:17:26.000Z" } ]