URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 103.163.118.122
Firstseen:2025-05-26 03:01:03 UTC
Total malware sites :23
Online malware sites :0 (0%)
Offline Malware sites :23 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-05-26 03:01:15 103.163.118.122Not listedAS140791 BKH-AS-VN- VNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-07-17 19:56:10http://103.163.118.122/cbot/Windows%20Security%...Offlinecensys exe opendir xworm NDA0E
2025-07-17 19:56:08http://103.163.118.122/cbot/svchosts.exeOfflinecensys exe opendir xworm NDA0E
2025-07-17 19:56:07http://103.163.118.122/cbot/Java%20Update%20Sch...Offlinecensys exe opendir xworm NDA0E
2025-07-17 19:56:07http://103.163.118.122/cbot/System%20interrupts...Offlinecensys exe opendir xworm NDA0E
2025-07-17 19:56:07http://103.163.118.122/cbot/cbot.exeOfflinecensys exe mirai ext opendir NDA0E
2025-05-30 23:49:06http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-30 23:49:04http://103.163.118.122/hidakibest.mipsOfflinemirai ext DaveLikesMalwre
2025-05-26 05:03:05http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:08http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:07http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:04http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 05:02:04http://103.163.118.122/HideChaotic/ub8ehJSePAfc...Offlinemirai ext DaveLikesMalwre
2025-05-26 03:01:15http://103.163.118.122/ohshit.shOfflinemirai ext cesnet_certs

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-07-28 10:37:329b9be71acaedde23188e091dd97de849794864dc79b6f0c358bc6147cb84a504exeXWorm
2025-07-27 10:43:393a48ac9fb778cec6d47c15e9624e55a6b838928c055e5fd9691ebed6729cda34exe 
2025-07-17 19:56:1063511ba19b0e8009e11abea3b913a708059f131d00969bc985db69097803ac7aexeXWorm
2025-07-17 19:56:082725c57b01b6dc6674dfd6f77184aabe819da76ac9dd21f672261daf74a26b04exeXWorm
2025-07-17 19:56:07b52a526ab1af48b1fff6acc78a42d081cba77121debdba0061e92ab1b1b725fcexeXWorm
2025-07-17 19:56:07bd3e0912a9f9f91dace8fe0ae1727d020879a79e7a239c1dde906f5dd9cb5b01exeXWorm
2025-07-17 19:56:0756074fe60ea08cfea64d66bb8f0a070cda95e35f9645c8600fe263905091a60dexe 
2025-05-30 23:49:0642dad863a63ac848e06ed29ea345764b72daf35e305c153b3fce6029b7cbc831elfMirai
2025-05-30 23:49:04b462ba2f999979da2877d19912dec4670a5cfa5da27d79b4698e97d0f8fb76a8elfMirai
2025-05-26 05:03:05d49d06e59412f92a1eae5f0ef66bdf36a7497151983bdfae32c97c0929f4be02elfMirai
2025-05-26 05:02:07140a0279764f4a4c5f7bfc569d451f94c8b7c0a2bed38e65e329d0f920e6613delfMirai
2025-05-26 05:02:076c1b648d8faf29465f33d790dbae59abb100b56a25ec90803c1f026087ce5842elfMirai
2025-05-26 05:02:07d1d6e68e23d49e3c735fccff543ff4dfe723149d58573c1eab3f88e71974f2d4elfMirai
2025-05-26 05:02:07b462ba2f999979da2877d19912dec4670a5cfa5da27d79b4698e97d0f8fb76a8elfMirai
2025-05-26 05:02:071f8bc69aed0cfffd9899001cccf86a4595c413b00fe93c25aef68d848c6b02aeelfMirai
2025-05-26 05:02:07cec2e61a532b6fd15cdd7e682f64fd00f07e97d1524d1995eb39e24f6c13658eelfMirai
2025-05-26 05:02:0746b82cf6b22744c07830a3d8a78e7f9426c512052516e25930a5fff171afb35felfMirai
2025-05-26 05:02:079862d2186cc270e8dfb4fc3962ad897177ddc039164dd641a6746e1524e660d4elfMirai
2025-05-26 05:02:07bb1fa3a547092538a79e3049ba99028941413b31c240a8b6ff7dc571c9ad0385elfMirai
2025-05-26 05:02:0762a748ddf21dbaebe9d66ccd636ab4ac360d83f98d9bc6b22cadf7b671474668elfMirai
2025-05-26 05:02:07e2eba61b70602462cbbc28b8e01c252363639f09132338a42f472a453e18c22aelfMirai
2025-05-26 05:02:0735c241bf3841295b4f14d99e4fbb6126bd17a02d9226073691f14fde70b7c189elfMirai
2025-05-26 03:01:083f2a0609f064f1145d36edde0df4b1f58eb7dfb67e6f19941961e1d4cc6ec134shMirai