Free
A community-maintained historical collection of malware and malicious infrastructure indicators contributed to CTIDAO.
malwarelegacyhistorical
// public entity intelligence
http://139.59.119.89/ohshit.sh
URLPublic evidence available
Observation summary
Public evidence currently associated with this exact indicator.
First observed
Feb 2026
Last observed
Feb 2026
Observations
1
Relationships
0
Tags
malware
Sources
ctidao
Related pivots
Hosts and IPs connected by the public pDNS sample.
139.59.119.89
Seen Not observed – Not observed
ip
0 observations
Matching free feeds
Community feeds containing this exact indicator.
Live lookupURLAnonymous · public
http://139.59.119.89/ohshit.sh1 IOC match·0 pDNS records
IOC matches
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| http://139.59.119.89/ohshit.sh | url | malware | ctidao | 2026-02-23 21:11:46 |
pDNS sample
A small public sample. Private research returns exact history and provider corroboration.
No passive DNS rows match this value.
Private research
Take this investigation further
1 IOC match. Private searches stay out of Latest searches. Each dashboard search costs 1 CTIDAO.