NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/hxxp://176[.]65[.]139[.]131/phantom_bash[.]sh
● IOC

hxxp://176[.]65[.]139[.]131/phantom_bash[.]sh

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Aug 14, 2026
Last seen
—
offlinemalware downloadreported by BlinkzSec
Look up on VirusTotal
Linked malware
ua-wgetgeofencedshDEU176-65-139-131DDoSAgent
Related Indicators
6
urlhxxp://62[.]60[.]249[.]165/main_x86same malware familyurlhxxp://62[.]60[.]249[.]165/main_mipssame malware familyurlhxxp://62[.]60[.]249[.]165/main_x86_64same malware familyurlhxxp://62[.]60[.]249[.]165/main_mpslsame malware familyurlhxxp://62[.]60[.]249[.]165/main_armsame malware familyurlhxxp://62[.]60[.]249[.]165/main_sh4same malware family
Connections
6 relationships
ua-wget
source
geofenced
source
sh
source
DEU
source
176-65-139-131
source
DDoSAgent
source
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon