🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 49.159.92.189
Firstseen:2021-07-07 16:52:02 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-07-07 16:52:06 49.159.92.18949-159-92-189.dynamic.elinx.com.twNot listedAS24163 UBBNET-AS-TW- TWyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-07-07 16:52:06http://49.159.92.189:8435/.iOfflineelf hajime tolisec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-08-01 08:34:3920ada0172398ca8f9836bc87905e249a19ee01323c55a44c5722d868307e1628elf  
2023-07-16 03:05:060c6549d98475dfbbb516b84774e05c0241505ab6c949bbf4890beba14a6579b9elf  
2023-06-25 16:32:21fc25983df085d7031a4028ef057a08efcd261d3e370bca6f92163a6d75f87635elf  
2023-04-03 15:51:5408b24e6011c4960cac668b4fa0c54bb0ce5207a5bf7669245ec1378a963d13b0elf  
2023-04-01 12:18:46f0a712b4468a2ba0bee0511df056f66d3f51d66eb8460c733f73b19336370686elf  
2022-10-19 07:45:42396d61e816d3874f93cc1c599798deba958ad54acdcdebdb92ee80b6319b8f4delf  
2022-08-25 07:20:093d6313d867d3210dca79e2633951588ff82b31dd31c749e2b1015ef81feffce7elf 
2022-05-23 12:41:47d9074b518992fac0b545447a2b25ebd9c58aae6d8404860af54a4075e3961389elf  
2022-04-21 02:03:13a32feb226230769563aea2219980ae5ed7a944efe97b6527051275d97da77309elf  
2022-03-13 08:48:11388201e8e69d8627acf22a0423684738d59239b41d4b3965038ad828acfac784elf  
2022-01-29 21:08:18863f682229f4630d6b35760513677594abbe2b9d0b2a59d102269f86ff49ff4felf  
2022-01-11 07:07:009bcbb326a28b09faeb6fbfc0e7d68fe6ff79b7248c7b2510aa8dd11cc55e0356elf 
2021-12-22 22:20:12094935769a8a98c45ec38f831964849563a602d50c8626a8e3326aa89a8a17a5elf  
2021-10-30 06:39:32ec1615cf6d4f5dfd8a270535e2f845a295f582c9458cb1553dd220a1f9432d5eelf  
2021-10-27 04:47:534a166cdb8854c55439677b464d382c35ae1be7fd889f684438f66ac37067ae3belf  
2021-10-26 10:00:440761a1a112c81543b396805a193e551fa9d92008de0abb88aaacdcdddcac94efelf  
2021-10-26 00:07:09db89f242edf8316a79d83959989382b08b9848095a874074717aa22822ba4821elf  
2021-10-07 19:25:149197db113e966d90b2901ddcfec8ae93ad3cfb5fc2515c939bb23ded578522f9elf  
2021-10-07 08:09:043fb0adfcb069856e09fe25ea276c02f4de85a56de6199d7cbd302414e87774ecelf  
2021-08-17 18:46:17c65cf14d434fc10561a3c305928d0eae84f9371849b6a1ca3e9a727b5096ef44elf  
2021-08-03 01:25:161fc42baf0ec6172d578cebc18416abee2e250d7be6ee16cca306b382d7b31722elf  
2021-07-07 16:52:05a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3elfHajime