URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 118.107.0.254 |
|---|---|
| Firstseen: | 2026-02-13 16:44:04 UTC |
| Total malware sites : | 1 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-02-13 16:44:08 | 118.107.0.254 | SBL687374 | AS64050 BGNL-HK |  SG | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-02-13 16:44:08 | http://118.107.0.254:2002/02.08.2022.exe | Offline | censys CobaltStrike  |  DaveLikesMalwre |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-02-28 08:02:47 | 0c7ee46f962a98d3217895e65b18a90ad4583faeb57b23fa50626c97a6c2961b | unknown | ||
| 2026-02-27 16:46:52 | 86f80657016cdbbf1424f1903ba27c0cb6f9aac80de008ab418806c2430baec5 | unknown | ||
| 2026-02-24 02:14:32 | 9ebcca59d79dae00ec8cb9c398f380f9abff5e7c14a8d942c67388efca350564 | unknown | ||
| 2026-02-20 02:16:48 | 356ffb39b4bf04827014a121c91ed0ff6cb425064eee1ccc385c3344ac727bde | unknown | ||
| 2026-02-14 13:30:50 | 5e7202a4803ebdab669e0a5343bc61db5d12397565743c2c53ab56290c8a61a5 | unknown | ||
| 2026-02-13 16:44:08 | 5341f6e8a26c4d744e93da467c1e85b0be53be682c24ca3c89d731f6391d7163 | unknown |