🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 158.94.210.129
Firstseen:2026-09-22 15:46:15 UTC
Total malware sites :13
Online malware sites :0 (0%)
Offline Malware sites :13 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-09-22 15:46:20 158.94.210.129SBL686264AS202412 OMEGATECH-AS- NLyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-09-24 13:45:19http://158.94.210.129/ID/KMCRYPTED_STUB.ps1Offlineasciii opendir powershell ps1 abuse_ch
2026-09-24 13:45:19http://158.94.210.129/IP/CRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch
2026-09-24 13:44:14http://158.94.210.129/ID/CRYPTED_STUB.ps1Offlineascii Formbook ext powershell ps1 abuse_ch
2026-09-24 13:43:17http://158.94.210.129/GMT/FiCRYPTED_STUB.ps1Offlineascii opendir powershell ps1 abuse_ch
2026-09-24 13:43:17http://158.94.210.129/GMT/1CRYPTED_STUB.ps1Offlineascii opendir powershell ps1 abuse_ch
2026-09-24 13:43:17http://158.94.210.129/GMT/GCRYPTED_STUB.ps1OfflineFormbook ext opendir powershell ps1 sacii abuse_ch
2026-09-22 17:27:15http://158.94.210.129/GMT/kkCRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch
2026-09-22 17:26:13http://158.94.210.129/GMT/kCRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch
2026-09-22 17:25:21http://158.94.210.129/GMT/HCRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch
2026-09-22 15:46:20http://158.94.210.129/DV/CRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch
2026-09-22 15:46:20http://158.94.210.129/DV/OJCRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch
2026-09-22 15:46:20http://158.94.210.129/DV/AKCRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch
2026-09-22 15:46:20http://158.94.210.129/DV/millsCRYPTED_STUB.ps1Offlineascii Formbook ext opendir powershell ps1 abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-09-24 13:45:189a41e1097d235621db8f0dc3175efdd1ed06233309ccb26035fa44ecc095f916ps1  
2026-09-24 13:45:18e3101dec95b44d3f7bb24468a5e9676f05f42cf444c87a40518e73cdb360850eps1  
2026-09-24 13:44:1325e0528e73442525c8cf0bd2f5c07d728fa6daa4efea37e38cff18fe75f4a4abps1  
2026-09-24 13:43:17c46aa77a5ba9250bd85af2ca20a2e7f6b3518be653f456737ff580038ef88785ps1  
2026-09-24 13:43:17e9a479c47ae5c9609798e52264aa887e66e35cd697660a3f41f7cec10ae7608cps1  
2026-09-24 13:43:1737ab900316fdbb0040a8cad4342b916870c3badf5775e9cf21fe2fddca757a08ps1  
2026-09-23 05:14:37e8a3815b8257861ba57065919ce9f6aa94b2810b28c28ed6555c7e5713eae62fps1Formbook
2026-09-23 04:59:311d40b886551802b1b2407eb8962bfb6d216ddfae804eb81be129a5ed238808f1ps1Formbook
2026-09-22 17:27:14f2144d49c9a5fc26bdc51e4c5315dc446feeb9af893d00ee2d1842a64f89c4a1ps1Formbook
2026-09-22 17:26:13605001bf9e7aa1c4605d0380af8273cb466410eebbcbaef2da7b820dec3ccd18ps1 Formbook
2026-09-22 17:25:20e9d0104631743498ad61fb4b310b2b2839043ef7cfe14e450d3dd50545da98dfps1 Formbook
2026-09-22 15:46:19559a96bd2a718c9780b28944c45202da02a7742101f9dcd9d2a3c72cfb403997ps1Formbook
2026-09-22 15:46:19333f0b85517d297c1693629f3202797b6b82a246ecbdff2ab08a025fd5bf54feps1Formbook
2026-09-22 15:46:19463275f4b35ae0d358355a10d0b3b521d0be421fef3bec23d6b1be19e1a4ec70ps1Formbook
2026-09-22 15:46:1971f43b32cc4d241a9c94b248447ec2dba007820c855a04fbf4c846cc778e5bd0ps1Formbook