This page summarises recently observed malicious URLs during the reporting window.
Window: 17 Sep 2026 00:10 UTC → 18 Sep 2026 00:51 UTC (exclusive end)
Generated: 18 Sep 2026 01:00 UTC
Overview
Online and offline refer to the URL status at the time of reporting.
- Total URLs: 463
- Online: 283
- Offline: 180
- Window start: 17 Sep 2026 00:10 UTC
- Window end: 18 Sep 2026 00:51 UTC
Most recent URLs
The table below lists the most recently added URLs in the feed for this run.
| ID | Status | Threat type | BAD URL |
|---|---|---|---|
| 3918331 | online | malware_download | http://113.236.70.214:42403/i |
| 3918330 | online | malware_download | http://113.236.70.214:42403/bin.sh |
| 3918329 | online | malware_download | http://182.119.165.88:43098/bin.sh |
| 3918328 | online | malware_download | http://216.129.184.213:37015/i |
| 3918327 | online | malware_download | http://182.127.7.247:60965/i |
| 3918326 | online | malware_download | http://115.55.63.87:59639/bin.sh |
| 3918325 | online | malware_download | http://123.10.240.49:57187/i |
| 3918324 | online | malware_download | http://216.129.184.213:37015/bin.sh |
| 3918323 | online | malware_download | http://182.127.7.247:60965/bin.sh |
| 3918322 | online | malware_download | http://125.24.167.30:34045/bin.sh |
| 3918321 | online | malware_download | http://176.65.139.131/bins/i686 |
| 3918314 | online | malware_download | http://220.158.234.65/a-r.m-5.Sakura |
| 3918313 | online | malware_download | http://220.158.234.65/a-r.m-6.Sakura |
| 3918315 | online | malware_download | http://220.158.234.65/a-r.m-7.Sakura |
| 3918317 | online | malware_download | http://220.158.234.65/i-5.8-6.Sakura |
| 3918316 | online | malware_download | http://220.158.234.65/m-i.p-s.Sakura |
| 3918319 | online | malware_download | http://220.158.234.65/m-p.s-l.Sakura |
| 3918318 | online | malware_download | http://220.158.234.65/p-p.c-.Sakura |
| 3918320 | online | malware_download | http://220.158.234.65/x-3.2-.Sakura |
| 3918308 | online | malware_download | http://146.19.198.131/apache2 |
| 3918306 | online | malware_download | http://146.19.198.131/bash |
| 3918305 | online | malware_download | http://146.19.198.131/cron |
| 3918304 | online | malware_download | http://146.19.198.131/ftp |
| 3918309 | online | malware_download | http://146.19.198.131/ntpd |
| 3918311 | online | malware_download | http://146.19.198.131/openssh |
Top hosts
The table below shows the ten hosts with the highest number of observed URLs in this window.
| Host | Count |
|---|---|
| raw.githubusercontent.com | 13 |
| 176.65.139.206 | 11 |
| 146.19.198.131 | 10 |
| 45.198.224.168 | 9 |
| 220.158.234.65 | 8 |
| 96.44.167.210 | 7 |
| thisisafalsepositive.st | 6 |
| 198.23.144.123 | 5 |
| 107.172.172.220 | 4 |
| 176.65.139.131 | 4 |
Top threat types
Only one threat type is shown in this window.
| Threat type | Count |
|---|---|
| malware_download | 463 |
Top tags
The table below lists the ten most frequent tags seen in this window.
| Tag | Count |
|---|---|
| Mozi | 185 |
| elf | 159 |
| mirai | 124 |
| 32-bit | 116 |
| mips | 76 |
| ua-wget | 45 |
| arm | 40 |
| rat | 37 |
| RemcosRAT | 32 |
| ascii | 21 |
This page is updated daily.