🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 117.36.199.38
Firstseen:2021-09-13 22:05:03 UTC
Total malware sites :21
Online malware sites :0 (0%)
Offline Malware sites :21 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-09-13 22:05:27 117.36.199.38Not listedAS4134 CHINANET-BACKBONE- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-07-20 03:36:04http://117.36.199.38:52528/mozi.mOffline tammeto
2022-02-14 15:35:03http://117.36.199.38:52528/mozi.aOffline tammeto
2022-01-04 06:50:06http://117.36.199.38:58187/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-31 21:49:05http://117.36.199.38:51312/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-29 16:30:47http://117.36.199.38:38817/Mozi.aOfflineMozi ext Petras_Simeon
2021-12-29 10:49:24http://117.36.199.38:57442/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-25 03:04:05http://117.36.199.38:52661/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-17 14:20:17http://117.36.199.38:33604/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-12 21:20:07http://117.36.199.38:39900/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-10 10:41:40http://117.36.199.38:45147/Mozi.mOfflineMozi ext Petras_Simeon
2021-12-02 21:35:13http://117.36.199.38:51212/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-11-29 19:50:33http://117.36.199.38:35626/Mozi.mOfflineMozi ext Petras_Simeon
2021-11-28 17:35:14http://117.36.199.38:45942/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-25 14:11:04http://117.36.199.38:50666/mozi.aOfflinemirai ext tammeto
2021-11-24 20:35:07http://117.36.199.38:42031/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-24 08:20:11http://117.36.199.38:35520/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-11 22:35:16http://117.36.199.38:33889/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-14 23:49:09http://117.36.199.38:59238/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-11 12:04:05http://117.36.199.38:59238/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2021-09-14 07:53:08http://117.36.199.38:49157/mozi.aOfflinemirai ext tammeto
2021-09-13 22:05:27http://117.36.199.38:49157/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-01-04 06:50:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-31 21:49:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-29 10:49:2412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-25 03:04:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-17 14:20:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-12-12 21:20:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-28 17:35:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-25 14:11:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-24 20:35:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-24 08:20:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-11 22:35:1612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-25 20:12:23c293160a4004fea18d8afc072ca4d79f37a94561d69007137158024d079724cdelf  
2021-10-19 05:45:526cefa33f3ad010609e4372684f97a21801eff0bf975d0df4afa194d210673560elf  
2021-10-18 09:16:03f19b00c3bba1526fe01c81153ba3eb3d62ddad2df1adaaf79d222f2dc1d87dedelf  
2021-10-18 09:12:25fba09a4c474ac69d54e29b78142a733118d5312b880427b98e39ae65c79f9acfelf  
2021-10-18 08:35:230aed94d746fb5e9fcbda879e159f915e5ede8ef39faaad8071d42cac476261a4elf  
2021-10-16 16:22:3788ce47609a69b0ad7aa15774b09c8f8939a8a1c33cd22f57acfa7942a9c6479felf  
2021-10-15 22:45:52ecd1d72ccf241a0b5b65e20ed1a5cebbda6b0937c0e7f0261e18765eab2d13fdelf  
2021-10-15 22:42:411e49b8ec32038225595c30fa3336bf91e9c283144d2eecf19a4c00ede2c2f624elf  
2021-10-15 21:38:2919e2d13f6b0fef9f6b09e35b7f3dd08b5f00adaf5d29cbd2ae9e8be04081cd5celf  
2021-10-14 23:49:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-14 04:44:30d5111609a30c2ee46179783ba79dfd5c539a7c5b285b161443e4511d02f99e61elf  
2021-10-11 12:04:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-14 07:53:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-13 22:05:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai