URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 116.55.72.18
Firstseen:2024-12-22 08:19:04 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-12-22 08:19:08 116.55.72.1818.72.55.116.broad.km.yn.dynamic.163data.com.cnNot listedAS4134 CHINANET-BACKBONE- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-08-19 13:51:27http://116.55.72.18:38032/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2026-08-19 13:29:21http://116.55.72.18:38032/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-12-25 19:26:18http://116.55.72.18:49131/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-12-25 15:37:13http://116.55.72.18:49131/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-05-25 06:42:45http://116.55.72.18:7803/.iOfflinehajime cesnet_certs
2025-05-24 03:01:08http://116.55.72.18:35700/.iOfflinehajime cesnet_certs
2025-05-02 01:35:06http://116.55.72.18:7613/.iOfflinehajime geenensp
2025-05-01 03:01:08http://116.55.72.18:42520/.iOfflinehajime cesnet_certs
2025-02-19 04:12:05http://116.55.72.18:58387/iOffline32-bit elf mirai ext threatquery
2025-02-13 22:44:05http://116.55.72.18:58387/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-02-01 04:17:06http://116.55.72.18:16023/.iOfflinehajime geenensp
2024-12-22 08:19:08http://116.55.72.18:28194/.iOfflinehajime geenensp