🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 222.120.157.68
Firstseen:2022-08-12 07:57:04 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2022-08-12 07:57:07 222.120.157.68Not listedAS4766 KIXS-AS-KR- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-08-12 07:57:07http://222.120.157.68:20993/.iOfflinehajime geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-08-29 11:02:48e86ddd14a376ccf252ec48ee9132afa26aadb6fdb3089b65e87dc760af26c345elf 
2023-08-18 16:03:00a9f86aea2b69453d3a6432637d01fc0e61cee9fd68beeebf4b1235315d336e3aelf  
2023-08-15 07:23:5345aa1fcd1674b5f685ed296e0e3ab904939f23423bfb055dc30bd6666473cdf8elf  
2023-08-07 12:08:421e60e090325757a855276d839d05d32043c86742f0298b8beada3c9dc2e37347elf  
2023-08-04 10:06:445e672effaf0dcefe9ba4ba2042db16125ddd4aaf96cef72803c342789abb71f1elf  
2023-08-03 07:42:05ebafa0ed47cd856a9cd9a27eb4e8827ed15edc3d4457320e2ca4aa51e371a919elf  
2023-08-02 14:05:4017e070e9b5acfa337b368c2d3284f0cb9a1cc5f42f1f42b621b666f198bfe39belf  
2023-08-02 01:51:16d6d5a7a89431c7f99aae6ae0a9d88c3ab71528de8fd4020fe683e3e22b86f37felf  
2023-07-29 16:14:31e874e713b6d03c43fc10ad947cd151b7111dbb4536a7aea2a39804d3011a72e0elf  
2023-07-27 11:07:14bb12dece6ea3da244c081b5b626871a7cfd995c55512f627785c9203b88accedelf  
2023-07-21 15:58:480267d1a79736e41e7aa40cbf186f8b0cf66bc978a35e9a0c16ad3a113ea7ba07elf  
2023-07-14 19:59:2058054aa9c3776fd4d81158360d1c54502fc4cf46f484c6c1a4bf8b78c1aba6c4elf  
2023-07-13 21:15:14916f0b4f038f2c3fcf539cd4c53a6235e3a0d7bd356cfb4790d92808b7277e86elf  
2023-07-12 14:10:434f02a6d55b68a9d50bf5aff9af00fdc165bb5c660e9a09163fc00372bc74ffe0elf  
2023-07-12 07:04:392b6ed2329302519ac10afbaaf9a276185f27b081547bfe8c7067021755b5fc41elf  
2023-07-06 04:00:36e2a4f9fdd208d4ed764a02f39d2b693e5697040a18bc0fbb3a91cea1d206add6elf  
2023-06-28 18:05:25b0a57c9d47cdee44095acf8b641c47e4d20ecdd478fe71f87fd28412f6fcfcf0elf  
2023-06-23 15:37:303d6313d867d3210dca79e2633951588ff82b31dd31c749e2b1015ef81feffce7elf 
2023-06-18 02:30:51be41290f2d9ed081716cfb413d210c798bc1d2f89c810e81e98666acd25b24ccelf  
2023-02-03 21:35:43f0a712b4468a2ba0bee0511df056f66d3f51d66eb8460c733f73b19336370686elf  
2023-02-03 19:03:159bcbb326a28b09faeb6fbfc0e7d68fe6ff79b7248c7b2510aa8dd11cc55e0356elf 
2023-02-03 15:25:00441719a965da87dada802ecd51d4620b76a6feb958c17cee79ecdfa1621066e8elf  
2023-01-28 04:35:57bdfbda9a9a1691ff14c51c323872f0dbe304448b6b45e91f491e5f15326bab5delf  
2023-01-28 03:57:3308b24e6011c4960cac668b4fa0c54bb0ce5207a5bf7669245ec1378a963d13b0elf  
2022-12-04 09:25:31fc25983df085d7031a4028ef057a08efcd261d3e370bca6f92163a6d75f87635elf  
2022-09-20 16:54:22396d61e816d3874f93cc1c599798deba958ad54acdcdebdb92ee80b6319b8f4delf  
2022-09-12 06:18:5452d17a1f0b1732aedac622f917e0516e39174699ee9b2fe6dd32dad090cd5f04elf  
2022-09-09 02:25:5701b7a516260ac61ea3d2505d95bac241a0c56b57541be409483a076bc6141dc6unknown  
2022-09-03 08:57:116b9815f022d9a5c247242e5bfe7199660263948228d99d0a2a1f032c95538aa1elf  
2022-08-12 07:57:07a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3elfHajime