############################################################################## # URLhaus ASN CSV Feed # # Generated on 2025-07-08 08:17:48 UTC # # # # For questions please refer to: # # https://urlhaus.abuse.ch/feeds/ # ############################################################################## # # Feed generated for AS132372 # # Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country "2025-04-27 23:59:20","http://103.175.51.106/ttraazcs.ps1","offline","malware_download","","103.175.51.106","103.175.51.106","132372","MY" "2024-10-23 09:00:16","http://103.161.133.169/App/xx/233_Raajjbqsmyz","offline","malware_download","ascii|encoded|RAT|RemcosRAT","103.161.133.169","103.161.133.169","132372","MY" "2024-08-02 12:13:09","http://103.161.133.23/52552/dryfruitsaregoodforhealthandsweet.Gif","offline","malware_download","","103.161.133.23","103.161.133.23","132372","MY" "2024-08-02 12:13:09","http://103.161.133.23/52552/eno/rty.rty.rty.rtyrty.rtyrtyrty.doc","offline","malware_download","","103.161.133.23","103.161.133.23","132372","MY" "2024-08-02 12:13:09","http://103.161.133.23/71271/igcc.exe","offline","malware_download","","103.161.133.23","103.161.133.23","132372","MY" "2024-08-02 12:13:09","http://103.161.133.23/xampp/ok/IEnetCache.hta","offline","malware_download","","103.161.133.23","103.161.133.23","132372","MY" "2024-08-02 12:13:09","http://103.161.133.23/xampp/up/updated.exe","offline","malware_download","","103.161.133.23","103.161.133.23","132372","MY" "2024-07-21 11:03:07","http://103.198.26.104/98098/utnn.txt","offline","malware_download","ascii|encoded|RemcosRAT|rev-base64-loader|txt","103.198.26.104","103.198.26.104","132372","MY" "2024-07-21 11:03:05","http://103.198.26.104/98098/crosscheckingentirethingfllowing.gIF","offline","malware_download","vbs","103.198.26.104","103.198.26.104","132372","MY" "2024-07-21 10:52:05","http://103.198.26.104/98098/ou/ou.ou.ou.ou.ou.doc","offline","malware_download","doc","103.198.26.104","103.198.26.104","132372","MY" "2024-07-19 09:28:07","http://103.161.133.121/95095/ZHHR.txt","offline","malware_download","ascii|encoded|RemcosRAT|rev-base64-loader","103.161.133.121","103.161.133.121","132372","MY" "2024-07-19 09:17:07","http://103.161.133.121/95095/butterburnverysweetgirleated.gIF","offline","malware_download","vbs","103.161.133.121","103.161.133.121","132372","MY" "2024-07-19 07:03:05","http://103.161.133.121/95095/TNB/hc.hc.hc.hc.hchchchch.doc","offline","malware_download","RemcosRAT|rtf","103.161.133.121","103.161.133.121","132372","MY" "2024-07-18 12:15:09","http://103.161.133.121/80180/BNCC.txt","offline","malware_download","ascii|encoded|Formbook|rev-base64-loader","103.161.133.121","103.161.133.121","132372","MY" "2024-07-18 12:15:06","http://103.161.133.121/80180/clearpicneedflowersnadimagesforhairwork.gIF","offline","malware_download","vbs","103.161.133.121","103.161.133.121","132372","MY" "2024-07-18 04:49:06","http://103.161.133.121/80180/cno/cno.cno.cno.cnocnocno.doc","offline","malware_download","Formbook|rtf","103.161.133.121","103.161.133.121","132372","MY" "2024-07-17 09:30:21","http://103.161.133.121/60960/ZHR.txt","offline","malware_download","ascii|encoded|rev-base64-loader|SnakeKeyLogger","103.161.133.121","103.161.133.121","132372","MY" "2024-07-17 07:29:06","http://103.161.133.121/60960/BH/bh..x.x.xbh.....x.x.x.xbhbh.doc","offline","malware_download","doc|SnakeKeyLogger","103.161.133.121","103.161.133.121","132372","MY" "2024-07-17 07:29:06","http://103.161.133.121/60960/greatlionloveroseentierworldlover.gIF","offline","malware_download","SnakeKeylogger|vbs","103.161.133.121","103.161.133.121","132372","MY" "2024-05-10 08:27:08","http://103.186.117.21/29020/hjv.exe","offline","malware_download","exe|opendir|RemcosRAT","103.186.117.21","103.186.117.21","132372","MY" "2024-05-10 08:27:05","http://103.186.117.21/xampp/phno/sweetgirllovedflowerseverywherewhichnotevenanyoneknowthatbeautifulflowerwalkingaroundtheworldsheisvery__beautifulgirliknow.doc","offline","malware_download","doc|RemcosRAT","103.186.117.21","103.186.117.21","132372","MY" "2024-05-10 05:37:09","http://103.186.116.171/3505/htm.exe","offline","malware_download","32|exe|RemcosRAT","103.186.116.171","103.186.116.171","132372","MY" "2024-05-10 04:51:09","http://103.186.116.171/3506/htm.exe","offline","malware_download","32|exe|RemcosRAT","103.186.116.171","103.186.116.171","132372","MY" "2024-05-10 04:09:11","https://103.186.117.21/xampp/phno/sweetgirllovedflowerseverywherewhichnotevenanyoneknowthatbeautifulflowerwalkingaroundtheworldsheisvery__beautifulgirliknow.doc","offline","malware_download","RemcosRAT|rtf","103.186.117.21","103.186.117.21","132372","MY" "2024-05-09 13:47:17","http://103.186.116.171/xampp/FGF/fg/beautifulthingstohappeningwhenwegivingachancetosomeonetoprovesoheproveandwegetchancetointroducethe___loverkindtobebackthelevel.doc","offline","malware_download","RemcosRAT|rtf","103.186.116.171","103.186.116.171","132372","MY" "2024-04-24 08:13:12","http://103.198.26.173/360/HJC.exe","offline","malware_download","DBatLoader|exe","103.198.26.173","103.198.26.173","132372","MY" "2024-04-24 05:41:08","http://103.198.26.173/xampp/cmss/cm/ireallywanthoimportantthisgirlinmylifesheismybeautifulgirlwhoilovedhertrulyfromtheheartsheismygirl___ireallylovedherfromtheheart.doc","offline","malware_download","RemcosRAT|rtf","103.198.26.173","103.198.26.173","132372","MY" "2024-04-24 04:58:25","http://103.198.26.173/355/HJC.exe","offline","malware_download","32|DBatLoader|exe","103.198.26.173","103.198.26.173","132372","MY" "2024-04-23 13:03:10","http://103.198.26.173/xampp/cmss/ireallywanthowimportantthisgirlinmylifesheismybeautifulgirlwhoilovedhertrulyfromtheheartsheismygirl___ireallylovedherfromtheheart.doc","offline","malware_download","RemcosRAT|rtf","103.198.26.173","103.198.26.173","132372","MY" "2024-04-18 19:12:09","http://103.198.26.25/2020/HJC.exe","offline","malware_download","exe|opendor|RemcosRAT","103.198.26.25","103.198.26.25","132372","MY" "2024-02-23 16:46:08","http://103.186.117.125/35009/conhost.exe","offline","malware_download","DBatLoader|exe","103.186.117.125","103.186.117.125","132372","MY" "2024-02-23 16:46:08","http://103.186.117.125/rfv/mayikissyouforkisseverytimetoundersandwhyallthishappeningeverywheretounderstandtheloveofmylovetoseehowperfectyouaretolove.doC","offline","malware_download","DBatLoader|doc","103.186.117.125","103.186.117.125","132372","MY" "2024-02-23 16:35:29","http://103.186.117.66/35008/conhost.exe","offline","malware_download","exe|opendir|RemcosRAT","103.186.117.66","103.186.117.66","132372","MY" "2024-02-23 16:34:11","http://103.186.117.66/red/ugcexepectedlovenotcameshesaidimlikeabrothersoicantbaletodoanylovewithherbutshesitrulyacutegirliloveheralotreallyloveuousoomuch.doC","offline","malware_download","DBatLoader|doc","103.186.117.66","103.186.117.66","132372","MY" "2023-03-14 19:02:02","https://kelaskan.com/agenzia/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","kelaskan.com","103.72.163.73","132372","MY" "2023-03-14 19:00:28","https://kelaskan.com/scarica/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","kelaskan.com","103.72.163.73","132372","MY" "2023-03-14 18:59:13","https://kelaskan.com/connect/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","kelaskan.com","103.72.163.73","132372","MY" "2022-11-02 01:57:13","https://ridzuanjamal.com/eta/qbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","ridzuanjamal.com","103.72.163.8","132372","MY" "2022-10-31 16:07:26","https://cnl-mesra.com.my/cd/qakbot.zip","offline","malware_download","BB05|BV1|iso|qakbot|qbot|quakbot|TR|zip","cnl-mesra.com.my","103.28.91.16","132372","MY" "2021-09-24 13:38:15","https://apihgadget.my/incidunt-qui/documents.zip","offline","malware_download","TR|zip","apihgadget.my","103.28.91.16","132372","MY" "2019-03-27 22:45:14","http://pkb.net.my/images/verif.myaccount.resourses.biz/","offline","malware_download","doc|emotet|epoch1|Heodo","pkb.net.my","103.72.163.37","132372","MY" "2019-03-25 11:25:04","http://pkb.net.my/images/UPS-US/Mar-25-19-02-00-03/","offline","malware_download","","pkb.net.my","103.72.163.37","132372","MY" "2019-03-19 19:33:19","http://pkb.net.my/images/sendincsecure/messages/question/EN_en/201903/","offline","malware_download","emotet|epoch1|Heodo|Zegost","pkb.net.my","103.72.163.37","132372","MY" # of entries: 43