🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 103.180.54.138
Firstseen:2024-04-15 17:18:03 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-04-15 17:18:13 103.180.54.138Not listedAS139611 BHARARINET-AS-AP- BDyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-04-22 09:03:31http://103.180.54.138:23725/.iOfflineelf hajime abus3reports
2024-04-15 17:18:13http://103.180.54.138:23725/iOfflineelf hajime ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-06-22 17:40:5734473adbf59fda264647449eb6aef4ffb19a88d107a0fbbdf877c5d73b8e5b2celf  
2024-06-22 17:26:305bb890dae693999fa4a3b13bf8985bcf87646cf430be7cf2987af451fa52e7eeelf  
2024-06-22 16:03:078b16e234b338291715f4aa7a5e73fc8ba1821f128f7e8befd5e16e39fe5a0f65elf  
2024-06-22 13:18:03f34135cd393af98bd1659bc0b2cc9b457a58564ba631203c3a934bafa05a1988elf  
2024-06-14 15:53:09283e541d60f3ad1ac0dab9cb9dc27f7603827a684280b96e0f0be08e17029337elf  
2024-05-30 13:10:43fe5765e01898d6ead79479f9013f74c2feab27862ffa679e70263b6974a29d94elf  
2024-05-28 15:58:4114516316d5b9e793eba0c2f9fc6d8c55d6b55803ae4b88d1ab58a7b2e347cf93elf  
2024-05-28 05:56:29637128447e0f2fa7a84f3321f7e5870157ed8c6fc3bdc8b1aeeedabf3391a178elf  
2024-05-26 15:09:322d8f5d005671ea3d53be84782493fddb3fd75c496ab712a15a88707cc84e2f82elf  
2024-05-17 16:14:04dd52d8d134b59365d4ea0cfceee4803efd4232cc4838b842f6ac3a66349bddc2elf  
2024-05-11 10:02:04601af625b776e0bbbc1c485f510b31bff66006fe8f748089ab4ebb50573dbd82elf  
2024-05-11 07:08:216e5096f66eb3085ec5d46ddf615298155ef1c46190d56b049fc1c58a145a96b5elf  
2024-05-11 07:04:12e245a7be35e4d8ba2a5efacc3c4afbcf33b89b68284578cd353ba0e0d3867a23elf  
2024-05-04 23:31:595f1a78a61f49976b83516ef1d1501879bbbbe9166742dc84c2eab98b8e546c36elf  
2024-05-04 19:59:37e245a7be35e4d8ba2a5efacc3c4afbcf33b89b68284578cd353ba0e0d3867a23elf  
2024-05-04 18:23:57902f9e1776eb3a508804b031c541f3eb2fd0ff92b1545d181a49667c62de4567elf  
2024-05-04 18:10:083471f29ab941f5071863357cb99c40334b803c8ac602609b058a05a638aa460belf  
2024-05-04 15:46:37c2d39e85526d7f7ec2711a98f203a0d7cb0d9a4f0e048ee31cd05d0330fcab04elf  
2024-05-04 10:17:077cf48efb48badc9a8989e90396d04c5f8cebb870b44a2e3789606fc0e0c3ff08elf  
2024-05-04 08:46:29465aeb24d8986164538b79bb239950ab534820f84aa9f4b857c34fe3149414f8elf  
2024-05-03 17:09:53673e31ed5a74715c776797745b627976c91c30af70645effdd82c4849ccd05ceelf  
2024-04-22 09:03:31020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime
2024-04-20 03:32:253ecfff4cbec36a8bd2a78f68ffe7494095c89af1f3032a62cf0cd7637c309c3aelf  
2024-04-20 01:54:025bb890dae693999fa4a3b13bf8985bcf87646cf430be7cf2987af451fa52e7eeelf  
2024-04-18 16:23:00f09dcf815fc11d90b11fdb49f64dbbedef2bef6c143467587222de655aff0a2aelf  
2024-04-15 17:18:10020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime