URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 1.246.223.130
Firstseen:2021-01-11 15:35:47 UTC
Total malware sites :13
Online malware sites :0 (0%)
Offline Malware sites :13 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-23 07:13:58 1.246.223.130Not listedAS9318 SKB-AS- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-01-27 19:34:06http://1.246.223.130:4744/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-16 09:29:51http://1.246.223.130:4560/iOfflinemirai ext Mozi ext Petras_Simeon
2021-10-15 12:03:05http://1.246.223.130:4560/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2021-10-10 16:09:06http://1.246.223.130:4055/iOfflinemirai ext Mozi ext Petras_Simeon
2021-10-04 09:18:05http://1.246.223.130:3209/iOfflinemirai ext Petras_Simeon
2020-11-01 16:49:05http://1.246.223.130:1400/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-08-12 10:42:36http://1.246.223.130:4055/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-07-31 15:04:12http://1.246.223.130:1536/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2020-06-20 09:04:44http://1.246.223.130:3209/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2020-05-24 21:20:05http://1.246.223.130:4055/Mozi.m+-O+-Offlinebashlite elf gafgyt ext mirai ext zbetcheckin
2020-02-19 18:04:17http://1.246.223.130:1400/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-01 20:05:59http://1.246.223.130:4744/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2019-12-23 07:13:58http://1.246.223.130:4055/Mozi.mOfflineelf mirai ext Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2023-07-13 07:26:14ae72014ed28cb5927ba2bc879ea187b1c43042e69a6964d811bef144818c3a66elf  
2022-09-28 09:35:40d666a4153e56f2210c6894d85c6394d2e69546a78c44b752b616f5571b71acb3elf  
2022-01-27 19:34:06e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2021-10-16 09:29:51e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2021-10-15 12:03:05e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2021-10-10 16:09:06e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2021-10-04 09:18:05e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2020-11-01 16:49:05e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2020-08-12 10:42:36e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2020-07-31 15:04:12e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2020-06-28 11:32:29e3ee24ce5e90ceeeb100163ae760ffa77844bbf8c37de87fed1840c5fe2404abelf  
2020-06-20 09:04:44e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2020-06-02 20:01:509a5e2f04ac0fb99a7e4af61a822e81b9ad8f42ef272cc436f788ea606936a50eelf  
2020-05-24 21:20:05e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2020-05-16 01:49:44d9b497cae877d5657ac01d54b941f5f452e252c02698d1db8edddc1456de540celf  
2020-02-19 18:04:17e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2020-02-01 20:05:59e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai
2019-12-23 07:13:58e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0elfMirai