HoneyLabs

IP report

69.33.213.199

payload staging host

This IP has not connected to our sensors directly. It appears as a malware staging host inside captured payloads.

Referenced in captured payloads

Our honeypots were instructed to download malware from this host. It has not connected to our sensors itself; it appears as the download target inside 1 captured dropper payload.

FileSHA-256VTViaFirst seen
nerv.mipsfaa743202d646a6a…29/75wget2026-08-19
[http]://69[.]33[.]213[.]199/nerv.mips
See all captured payloads →

Try another

Look up a different IP

Or pick from the top 10 attackers live right now.

Build with the data

Get an API key

MCP for Claude / Cursor or raw HTTP JSON-RPC.