🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 92.119.165.164
Firstseen:2026-11-07 08:25:05 UTC
Total malware sites :9
Online malware sites :5 (56%)
Offline Malware sites :4 (44%)
Newest active malware site :2026-11-07 08:25:16 UTC
Oldest active malware site :2026-11-07 08:25:12 UTC (Age: 1 day, 22 hours, 53 minutes)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-11-07 08:25:12 92.119.165.164lain.92.119.165.164.aluy.netSBL691495AS211507 Aluy- NLyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-11-07 08:25:16http://92.119.165.164/a-r.m-7.SakuraOnlineelf ua-wget ClearlyNotB
2026-11-07 08:25:16http://92.119.165.164/m-i.p-s.SakuraOnlineelf ua-wget ClearlyNotB
2026-11-07 08:25:16http://92.119.165.164/a-r.m-5.SakuraOfflineelf ua-wget ClearlyNotB
2026-11-07 08:25:13http://92.119.165.164/x-3.2-.SakuraOfflineelf ua-wget ClearlyNotB
2026-11-07 08:25:13http://92.119.165.164/i-5.8-6.SakuraOnlineelf ua-wget ClearlyNotB
2026-11-07 08:25:13http://92.119.165.164/a-r.m-4.SakuraOfflineelf ua-wget ClearlyNotB
2026-11-07 08:25:12http://92.119.165.164/x-8.6-.SakuraOfflineelf ua-wget ClearlyNotB
2026-11-07 08:25:12http://92.119.165.164/m-p.s-l.SakuraOnlineelf ua-wget ClearlyNotB
2026-11-07 08:25:12http://92.119.165.164/m-6.8-k.SakuraOnlineelf ua-wget ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-11-09 03:04:12fd11c15ae4b392bf55150e9bffc520a06146801726a6f2c58a9f59ffe01fd2a4elf 
2026-11-09 02:46:5339d77d33320ab2c8e2b64b2902211efc7e000ba6d1e9ab35ef27f150f61ed174elf 
2026-11-09 02:43:26debb1c20d57e69c75c9027029149ce1763b30b4f29ef341012e37d8e0021a1f7elf 
2026-11-09 02:26:5403e479b83d14a07a09ce188c1a18fa12ecc62577fe022e41ea69da05facfc168elf 
2026-11-09 01:53:274fe62f22fc6f294a1f57743842c6e31b1c723a107c5c72b1b0d99e65000bdf07elf 
2026-11-09 01:45:19d74bcc57d41bb864bb7de74f02816a3c2549a7ad57fdeb5e648da88751595ee8elf 
2026-11-09 01:21:39aca58b8964d56d0413dbe2bbf444e577df529a4462537fb856b7219edaec553eelf 
2026-11-09 00:18:086929daf48eb8a8ea67e4d13407020cf19bff5fd0a555affcd4b6a1384816c203elf 
2026-11-08 23:50:22c74941ccf16060c6089f00e00e8935a3c26897452ee16d84a09bf1a1317dcf27elf 
2026-11-07 23:01:538784f9fc2603eb31259b16c88471b42538b15f6a4cb8f7c649957967818686d3elf 
2026-11-07 22:40:226652ad2f9fc3217b7ed0c241920d18a7c73dfb31406cc2839a5d430667bce32eelf 
2026-11-07 08:25:16da8a16ad477f6f8cce793c18b2c9dcbea9e8ff745e973bdef164de398fdd2a60elf 
2026-11-07 08:25:16d2831e40b8b488dad4faf5ee3143a434be168e6abaf3b4048c32a9b023286f68elf 
2026-11-07 08:25:1625557e295a803c0b29e7ae567d82adeba316da0ed9483e1454035ebb7482c9daelf 
2026-11-07 08:25:13b196d80720e8f7d356ff97877011785b3bc39f608f967b1633136ca342375db9elf 
2026-11-07 08:25:13fee92459fcc31c7c6696dbfa8e06a0b4702f64e95faa68a70de24fcae34ba3b6elf 
2026-11-07 08:25:13dba92e4afd087fbb6364ebb0cccffd458d8e10176d5437fb95ab6510b62d1688elf 
2026-11-07 08:25:12bceb12548c7836a6bd78f26284acba1f78c4c725d9edfde12ba953e592cd30d3elf 
2026-11-07 08:25:11047bf7ec7b8af629d0d5d1af5ef7ab3bb083f4eb37b99575ead70d91c52af417elf 
2026-11-07 08:25:11dca363f6502e0a7bc3e9b200e6efd4326c091e43648335b3ad50d4eae12c163belf