🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 221.159.24.114
Firstseen:2022-02-22 04:31:02 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-02-22 04:31:07 221.159.24.114Not listedAS4766 KIXS-AS-KR- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2023-01-24 22:05:21http://221.159.24.114:42067/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2022-02-22 04:31:07http://221.159.24.114:10772/.iOffline32-bit arm elf hajime geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-05-22 21:52:2706fcc8e49dd2570a56318d255404540ed380e284ad00866e0ce0f3052be4bd58elf  
2023-01-24 22:05:21e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2022-10-04 04:16:21988f2560ecced54ce59dceeef303dae86a1e5d7e505bd04ae27f080746687682elf  
2022-06-12 03:27:13ffeead9d7a5bc2e7d2b77ee7817431a8c97c87b5e31cafd9efd2e324713dc5bcelf 
2022-06-08 13:59:3577e09fc8e1949c56beb259702714c4329436c88b478472a0bdd62e1ef9cacef8elf  
2022-06-06 09:40:011d616078c03920f62d7cb1f556290fb71e04a66d2ea44480a3635f94f168584celf  
2022-05-18 22:38:1208a9bfc52b026d774cb88cab30f570dd1061e3927816a14d057d6ed05512e8a1elf  
2022-04-17 13:09:29cdace28be7b62ee7e8de2161991d8321a7517e51b24fe7a977847e5035552476elf  
2022-04-07 13:49:395bf893cc8ffad44c96a7314448d8fe207c20c786f302b8cd206a44da27ecc778elf  
2022-04-02 14:11:517e8fe37af8dc77e12c309762db911e165f96634a5183b78ee88df71d1b60a1a4elf  
2022-03-25 16:38:25614447103b2dbb53845b7cd6dc47e9087c287f77ff24d0c4fb18ac855a815e5felf  
2022-03-21 02:49:0950a4d8d509a518eb79ef2645594e14ca8505e5cc8bcf591315903b3992b6d75delf 
2022-03-20 06:42:07a61b6b56d344fb216911671b8b517661a962cb19647c31abd8e0d6417790d68aelf  
2022-03-13 12:28:07bb30bd74c513656222ce8973ad6d0e081936994715d9ab0123a2ab2570bd2705elf 
2022-03-04 16:28:02416f0f209a7182889eb0babe811c173aaafafcd927af672e4ca630e02b7275bcelf  
2022-03-04 15:05:50032629de7930b26b9f9e863b7199b90fd038a5d78c9b7736217eed9cb9c36355elf  
2022-02-22 04:31:06a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3elfHajime