URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 198.46.132.159
Firstseen:2021-07-16 07:59:03 UTC
Total malware sites :14
Online malware sites :0 (0%)
Offline Malware sites :14 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-07-16 07:59:05 198.46.132.159198-46-132-159-host.colocrossing.comNot listedAS36352 AS-COLOCROSSING- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-08-11 15:12:04http://198.46.132.159/regedit/reg/vbc.exeOfflineLoki ext info_sec_ca
2021-08-11 07:23:04http://198.46.132.159/regedit/vbc.exeOfflineLoki ext lokibot ext reecdeep
2021-08-09 05:50:04http://198.46.132.159/rdp/vps/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-08-09 05:49:04http://198.46.132.159/rdp/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-07-28 14:47:12http://198.46.132.159/wxc/wx/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-07-28 14:47:08http://198.46.132.159/wxc/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-07-27 15:10:04http://198.46.132.159/www/ww/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-07-27 15:10:04http://198.46.132.159/www/vbc.exeOfflineexe Loki ext opendir abuse_ch
2021-07-22 14:51:05http://198.46.132.159/sww/sw/vbc.exeOfflineLoki ext info_sec_ca
2021-07-22 14:51:03http://198.46.132.159/sww/vbc.exeOfflineLoki ext info_sec_ca
2021-07-22 14:50:03http://198.46.132.159/document/sww.wbkOffline info_sec_ca
2021-07-22 14:50:03http://198.46.132.159/document/sw.wbkOffline info_sec_ca
2021-07-20 09:22:04http://198.46.132.159/ftpp/vbc.exeOfflineexe Loki ext abuse_ch
2021-07-16 07:59:05http://198.46.132.159/vbc/vbc.exeOfflineexe Loki ext opendir abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-08-13 03:50:42244e6ac8c5da099a4d6d7c6f6ea2f7b7a146311f1b38b5d9c609d575a3597a93exeLoki
2021-08-12 06:38:32f23caf37ae944360657463d27df572d232fb5ef227d3ef753d1c6e6de80f12f9exeLoki
2021-08-11 15:12:04ca155beb7d28cde5147eba7907c453d433b7675ba1830e87d5a4e409b5b912e1exeLoki
2021-08-11 07:23:0421d20868359158bc59aef5f5e508121ffb4a299883d8f454c3f40a9a2170d6aeexeLoki
2021-08-09 05:50:04576c7a88fa73ff6038bc2f5cfe7a1f2d28974f02e5def345209a84fbd60cf3ddexeLoki
2021-08-09 05:49:04227c68e21120251881438e05eb3c29d6f0e59d9e97b8e646707f74992773fde1exeLoki
2021-07-29 00:13:59b43f61f0ce7cc012f811460ae0c1483e90c6f5936a6c9033bdb9a14212879e42exeLoki
2021-07-29 00:01:20b43f61f0ce7cc012f811460ae0c1483e90c6f5936a6c9033bdb9a14212879e42exeLoki
2021-07-28 23:44:134ace847e222f6d7a991dc958192345b807eaa7b717cd63833d6d70a866c21d9fexeLoki
2021-07-28 14:47:11f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aaexe 
2021-07-28 14:47:072c75665cd0b8e4c00b4c1db314011a620759cbe725e2eddbaaa71db7e94dc446exeLoki
2021-07-27 15:10:0489b691f7c5016920b20535dc985904842bdf04ab6a8dd34f1716883083b3f47cexeLoki
2021-07-27 15:10:04a60e97778614ab28c9e6acf9a2a76e8f42c09372af1a9e5e6802018e3cee2829exeLoki
2021-07-26 01:05:160fb699b995c7844be905bde197f7ba9da846861a5030b1bbf15bf5a5cc9c460bexeLoki
2021-07-26 00:03:460fb699b995c7844be905bde197f7ba9da846861a5030b1bbf15bf5a5cc9c460bexeLoki
2021-07-22 14:51:05f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aaexe 
2021-07-22 14:51:037e0c5eb5f18d5313c39c806aeb2ee42b3ca22661c6c1aa2eb0fbead3948f6e26exeLoki
2021-07-22 14:50:03fccff2b436faf6e84c2412b2353a7fc7eaaff2eb818bb14ce0cd9eece4f80534rtf 
2021-07-22 14:50:038dc06fc321e2e0f5b9a7795ae9dd79e95aefe51cb98beccb4bf1f467a8618156unknown 
2021-07-20 09:22:04bdabaf81ff609847d79def6c9d92711e3cde3b42eba1992980afda99ced56a69exeLoki
2021-07-16 07:59:0428879fb1f6f11c8e35c643cdbd97865f5d51f26e8f0e674cc717cdc1d5bc54d9exeLoki