URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 112.30.1.55
Firstseen:2020-09-16 04:09:05 UTC
Total malware sites :21
Online malware sites :0 (0%)
Offline Malware sites :21 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-16 04:09:16 112.30.1.55Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-10-15 09:26:32http://112.30.1.55:47130/mozi.aOffline tammeto
2021-09-04 18:34:34http://112.30.1.55:47130/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-09-03 02:28:12http://112.30.1.55:47130/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-03 01:55:13http://112.30.1.55:47130/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-28 21:49:12http://112.30.1.55:38783/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-28 20:19:12http://112.30.1.55:38783/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-13 19:35:11http://112.30.1.55:54359/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-05-24 14:35:13http://112.30.1.55:54359/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-04-21 13:05:05http://112.30.1.55:36821/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-04-13 07:57:13http://112.30.1.55:52811/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-04-13 00:20:09http://112.30.1.55:52811/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-04-11 21:22:10http://112.30.1.55:52811/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-04-09 12:45:05http://112.30.1.55:52811/Mozi.aOfflinemirai ext tammeto
2021-03-28 15:48:05http://112.30.1.55:50863/iOffline32-bit arm elf mirai ext geenensp
2021-03-28 15:29:10http://112.30.1.55:50863/bin.shOffline32-bit arm elf mirai ext geenensp
2021-03-26 20:04:14http://112.30.1.55:50863/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-02-16 09:04:06http://112.30.1.55:50863/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-23 21:34:05http://112.30.1.55:51317/iOffline32-bit arm elf mirai ext geenensp
2020-09-17 14:35:06http://112.30.1.55:51317/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-17 10:49:06http://112.30.1.55:51317/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-16 04:09:16http://112.30.1.55:51317/bin.shOffline32-bit arm elf mirai ext geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-09-04 19:24:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-03 02:28:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-03 01:55:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-28 21:49:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-28 20:19:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-13 19:35:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-24 14:35:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-21 13:05:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-13 07:57:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-13 00:20:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-11 21:22:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-09 12:45:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-28 15:48:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-28 15:29:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-26 20:04:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-16 09:04:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-23 21:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-17 14:35:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-17 10:49:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-16 04:09:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai