URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host 172.104.40.92.

Database Entry


Host:172.104.40.92
Spamhaus DBL:Unknown
SURBL:Not listed
Firstseen:2018-05-03 07:02:01 UTC

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-05-03 07:02:17172.104.40.92li1620-92.members.linode.comNot listedAS63949 LINODE-AP Linode, LLC- SGyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-06-25 16:45:07http://172.104.40.92/t.exeOfflineemotet exe IRCbot Clean@lovemalware
2018-05-03 07:02:45http://172.104.40.92/js/m.exeOfflinemalware Clean@JAMESWT_MHT
2018-05-03 07:02:17http://172.104.40.92/js/kukul.exeOfflinemalware Clean@JAMESWT_MHT