URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 112.198.238.18
Firstseen:2024-10-21 06:03:04 UTC
Total malware sites :18
Online malware sites :0 (0%)
Offline Malware sites :18 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-10-21 06:03:08 112.198.238.18Not listedAS132199 GLOBE-MOBILE-5TH-GEN-AS- PHyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-08-17 10:01:28http://112.198.238.18:53312/iOfflinemirai ext cesnet_certs
2026-08-17 10:01:27http://112.198.238.18:53312/bin.shOfflinemirai ext cesnet_certs
2026-04-01 01:04:08http://112.198.238.18:49083/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-12-13 15:02:15http://112.198.238.18:49049/iOffline32-bit elf mirai ext Mozi ext threatquery
2025-11-02 23:30:15http://112.198.238.18:37922/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-11-02 23:01:08http://112.198.238.18:37922/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-10-22 12:01:29http://112.198.238.18:48230/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-10-22 11:39:17http://112.198.238.18:48230/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-10-10 17:33:23http://112.198.238.18:60708/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-10-10 17:03:21http://112.198.238.18:60708/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-09-06 15:59:29http://112.198.238.18:47445/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2024-12-20 06:05:08http://112.198.238.18:50378/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2024-12-20 05:37:06http://112.198.238.18:50378/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2024-12-14 09:49:33http://112.198.238.18:46839/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2024-11-24 01:49:07http://112.198.238.18:53089/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2024-11-22 01:05:08http://112.198.238.18:55347/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2024-11-17 03:49:06http://112.198.238.18:50931/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2024-10-21 06:03:08http://112.198.238.18:57826/Mozi.mOfflinemirai ext Mozi ext Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-08-17 10:01:2812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2026-08-17 10:01:2612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2026-04-01 01:04:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-12-13 15:02:1512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-11-02 23:30:1512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-11-02 23:01:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-10-22 12:01:2912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-10-22 11:39:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-10-10 17:33:2312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-10-10 17:03:2012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2025-09-06 15:59:2912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2024-12-20 06:05:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2024-12-20 05:37:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2024-11-24 01:49:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2024-11-22 01:05:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2024-11-17 03:49:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2024-10-21 06:03:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai