URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 91.92.240.138
Firstseen:2024-02-17 12:43:04 UTC
Total malware sites :18
Online malware sites :0 (0%)
Offline Malware sites :18 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-02-17 12:43:05 91.92.240.138SBL686267AS214943 RAILNET- DEyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-02-18 09:37:09http://91.92.240.138/bot.mipsOfflineelf abuse_ch
2024-02-18 09:37:09http://91.92.240.138/bot.arm7Offlineelf abuse_ch
2024-02-18 09:37:08http://91.92.240.138/bot.arm5Offlineelf abuse_ch
2024-02-18 09:37:08http://91.92.240.138/bot.x86Offlineelf abuse_ch
2024-02-18 09:37:08http://91.92.240.138/bot.x86_64Offlineelf abuse_ch
2024-02-18 09:37:08http://91.92.240.138/bot.mpslOfflineelf abuse_ch
2024-02-18 09:37:08http://91.92.240.138/bot.arm6Offlineelf mirai ext abuse_ch
2024-02-18 09:37:08http://91.92.240.138/bot.ppcOfflineelf abuse_ch
2024-02-18 09:37:08http://91.92.240.138/bot.armOfflineelf abuse_ch
2024-02-18 09:37:07http://91.92.240.138/andOfflinebash sh abuse_ch
2024-02-18 09:37:06http://91.92.240.138/bot.sh4Offlineelf abuse_ch
2024-02-18 09:37:06http://91.92.240.138/bot.m68kOfflineelf abuse_ch
2024-02-18 09:37:06http://91.92.240.138/bot.spcOfflineelf abuse_ch
2024-02-18 09:37:06http://91.92.240.138/aOfflineelf abuse_ch
2024-02-18 09:34:11http://91.92.240.138/ppcOfflineelf mirai ext abuse_ch
2024-02-18 09:34:11http://91.92.240.138/wgetOfflineelf abuse_ch
2024-02-17 12:43:05http://91.92.240.138/armOfflineelf mirai ext tolisec
2024-02-17 12:43:05http://91.92.240.138/arm7Offlineelf mirai ext tolisec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-02-18 09:37:08778cc0127e005ff34a0897f5072333b58ec3682673b3a7d2b81dcb9e4cd043a2elf  
2024-02-18 09:37:080f26d64aca2d3685f9269efaa2408393441efaa32b0dab4a9f957681de4a94b7elf  
2024-02-18 09:37:08934330fce59357d02ead738867c0077373ffc65e2a1c2125a2c4496f1842f738elf  
2024-02-18 09:37:089f553570700f019ed6d50027b5eaad6817ba69912c67f21c626faa9d47ece2b9elf  
2024-02-18 09:37:0896c5ae9a7df7296a3e8c15fbfa6d41d5864ec987779af90b31baa9183e22356eelf  
2024-02-18 09:37:0802be5aec4237dba8f01527d230381dece5be5f239da331d6c8cf1615087d3034elfMirai
2024-02-18 09:37:085db49b05b0d5c6ff60cf17e023b36c1640901577b97923b3b0a467b6da88b0ffelf  
2024-02-18 09:37:082c9548ca6298f438d4ab3464c7c1fdb93db4a5e1a005227d7bdaf8616f91c11felf  
2024-02-18 09:37:078ddfa4fb225bb44d5b9beb0ac7902736368d55995331505ee06112e01bc43f02elf  
2024-02-18 09:37:07cc69fde64d29f03363863e4962de4d51354a245623c09cdcec26274aa10f1260unknown  
2024-02-18 09:37:063f2c2028b62687895d5ee8b14a953181c1cd6b285edcbb2592e31cacb7e9554belf  
2024-02-18 09:37:067ebb245636034b5eb44d9dba9bdb72abf173b4cd9e3dac4964ece7b74da7cf8aelf  
2024-02-18 09:34:11494681674c24162e5081fc739a2f89d1fc9dcdff4b81a66ba4efa57c66095ae3elfMirai
2024-02-18 09:34:11da20e2d06d41c08d65bab0a8785e5be78ac5ea8e50af552824a0dca163aa6c13unknown  
2024-02-17 23:23:1813014707a5338954138b6b83fd04080407e3088ef6bcf3307d0cc1cdf44c21c0elf  
2024-02-17 12:43:059f68f67e0cf0a8f337091efd3bd1033427ce33284441c32d369330d43d1e0621elfMirai
2024-02-17 12:43:05803f680d0ff3be3f6b2f56cca8199397c8a920266c35d626de7647876170b972elfMirai