URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 5.180.82.30
Firstseen:2025-12-24 15:43:05 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-12-24 15:43:07 5.180.82.30Not listedAS215703 FREAKHOSTING- DEyes

Malware URLs


The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-12-30 13:22:264284326b697179fb7e523773fd42f1fa0d9d99503ee65b1717629f3499a01ee7elfMirai
2025-12-30 13:13:475e2dccfdf3682d3d51f99050885c1e935ee9e4182a288f44d23de57e1a06e731elfMirai
2025-12-30 12:32:0468b969af7f174a9fb9542f0707ece387bacb75b22b9826e7cd679e0504faf3c2elfMirai
2025-12-30 10:49:4222ec5a23abd58b01a829b2b54277866ba7e8ae4bc1872b88d3a79036453211eeelfMirai