URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 192.159.99.164 |
|---|---|
| Firstseen: | 2026-08-27 16:11:13 UTC |
| Total malware sites : | 8 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 8 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-08-27 16:11:18 | 192.159.99.164 | 192.159.99.164.powered.by.rdp.sh | SBL682997 | AS210558 services-1337-gmbh | US | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-08-27 16:12:17 | https://192.159.99.164/728277/base/base.apk | Offline | 192-159-99-164 ua-wget | |
| 2026-08-27 16:11:29 | https://192.159.99.164/463869/base/base.apk | Offline | 192-159-99-164 ua-wget | |
| 2026-08-27 16:11:28 | https://192.159.99.164/840474/base/base.apk | Offline | 192-159-99-164 ua-wget | |
| 2026-08-27 16:11:27 | https://192.159.99.164/840474/dropper/NextGen_m... | Offline | 192-159-99-164 ua-wget | |
| 2026-08-27 16:11:27 | https://192.159.99.164/136384/base/base.apk | Offline | 192-159-99-164 ua-wget | |
| 2026-08-27 16:11:23 | https://192.159.99.164/710893/dropper/NextGen_m... | Offline | 192-159-99-164 ua-wget | |
| 2026-08-27 16:11:19 | https://192.159.99.164/463869/dropper/NextGen_m... | Offline | 192-159-99-164 ua-wget | |
| 2026-08-27 16:11:19 | https://192.159.99.164/136384/dropper/NextGen_m... | Offline | 192-159-99-164 ua-wget |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-08-27 16:12:17 | 000f3363ebf6b2ad599dfb7022fae11dc157465aaefd9f35f3dadd1b5fabd111 | zip | ||
| 2026-08-27 16:11:28 | b9bee1949f9bc39533450ae234f316f72f8f481cb348e4e9646cce6f818aa295 | zip | ||
| 2026-08-27 16:11:28 | 2798eaf66df2622553e60127f47e760b566a5cb88b084fed8d05f9298f9db532 | zip | ||
| 2026-08-27 16:11:26 | b0d512312d455018d08dd82628824fd4464e2170fbc5fe5abb06767825259859 | zip | ||
| 2026-08-27 16:11:26 | 6215b1d608efa8a3784d9736c4dea06fbc074375938cee6eb525f0c2c9b8a0ad | zip | ||
| 2026-08-27 16:11:23 | 1e5c2b9f5f4314b5c10d2685ad9ffcca9f6e2194cdfbbd61013dad2a71810fb8 | zip | ||
| 2026-08-27 16:11:18 | 3bad63c6c09ed4923e93712de4fa315b6e296d4cb1061f5b4e5c4fcd30dcaf96 | zip | ||
| 2026-08-27 16:11:18 | 20b717d37f5cbec14aae02f9e0d47f642e72288f26982c2e555fb942748dbc95 | zip |
US