🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 129.56.2.154
Firstseen:2024-05-07 12:58:18 UTC
Total malware sites :2
Online malware sites :0 (0%)
Offline Malware sites :2 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2024-05-07 16:59:15http://129.56.2.154:54998/.iOfflineelf hajime abus3reports
2024-05-07 12:58:25http://129.56.2.154:54998/iOfflineelf hajime ClearlyNotB

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2024-05-11 18:32:492791990fec00623e0c62081b8145b3aa2d9b00e145a8880ff66fc4a025cc8e4felf 
2024-05-11 09:23:4483f1cc08c430107e70a2976aef153eb5e8f25fecc561f4a55d226158c080ace9elf 
2024-05-11 07:21:5920c9c9e9153564ee44ab7fa7bdb571956245c08859844048df1e8b8771505eebelf 
2024-05-07 16:59:15020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime
2024-05-07 12:58:24020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0elfHajime