URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 112.30.1.150
Firstseen:2020-09-20 05:50:02 UTC
Total malware sites :28
Online malware sites :0 (0%)
Offline Malware sites :28 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-20 05:50:17 112.30.1.150Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-12-21 10:00:10http://112.30.1.150:34613/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-12-14 10:33:14http://112.30.1.150:34613/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-12-13 02:49:05http://112.30.1.150:34613/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-11 05:34:07http://112.30.1.150:34613/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-23 08:49:06http://112.30.1.150:37958/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-18 15:26:05http://112.30.1.150:37958/mozi.aOfflinemirai ext tammeto
2021-11-03 17:16:13http://112.30.1.150:39761/bin.shOffline32-bit arm elf mirai ext geenensp
2021-10-26 17:05:07http://112.30.1.150:39761/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-22 20:46:11http://112.30.1.150:39761/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-22 01:49:09http://112.30.1.150:39761/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-09-22 06:04:05http://112.30.1.150:45541/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-22 05:40:05http://112.30.1.150:45541/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-19 01:04:19http://112.30.1.150:45541/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-28 20:34:32http://112.30.1.150:54892/mozi.aOffline tammeto
2021-06-26 18:03:33http://112.30.1.150:54892/Mozi.mOfflineMozi ext Gandylyan1
2021-05-04 05:46:13http://112.30.1.150:54892/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-04 05:17:16http://112.30.1.150:54892/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-03-31 01:07:13http://112.30.1.150:43304/bin.shOffline32-bit arm elf mirai ext geenensp
2021-03-27 11:46:15http://112.30.1.150:43304/iOffline32-bit arm elf mirai ext geenensp
2021-03-11 12:34:05http://112.30.1.150:43304/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-02-22 06:19:05http://112.30.1.150:43304/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-01-22 10:34:05http://112.30.1.150:46827/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-12-01 06:19:07http://112.30.1.150:59652/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-25 19:49:11http://112.30.1.150:59652/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-23 03:46:04http://112.30.1.150:47749/iOffline32-bit arm elf mirai ext geenensp
2020-09-22 23:29:04http://112.30.1.150:47749/bin.shOffline32-bit arm elf mirai ext geenensp
2020-09-21 16:51:05http://112.30.1.150:47749/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-20 05:50:17http://112.30.1.150:47749/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-02-09 14:25:25a3586aa393d4eb1736ce342bf79efa7a20c821309aaa845ffa3eab3f10e53d04elf  
2021-12-21 10:00:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-14 10:33:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-13 02:49:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-11 05:34:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-23 08:49:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-18 15:26:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-03 17:16:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-26 17:05:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-22 20:46:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-22 01:49:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-22 06:04:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-22 05:40:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-19 01:04:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-04 05:46:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-04 05:17:1512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-31 01:07:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-27 11:46:1512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-11 12:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-22 06:19:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-22 10:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-01 06:19:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-25 19:49:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-23 03:46:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-22 23:29:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-21 16:51:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-20 05:50:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai