URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 172.220.54.216
Firstseen:2019-12-25 23:59:32 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-25 23:59:34 172.220.54.216172-220-054-216.res.spectrum.comNot listedAS20115 CHARTER-20115- USyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-03-15 15:04:29http://172.220.54.216:37767/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-04 12:04:56http://172.220.54.216:43147/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-26 16:04:24http://172.220.54.216:43538/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-19 10:03:49http://172.220.54.216:59570/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-01-21 10:04:20http://172.220.54.216:37181/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-13 07:03:07http://172.220.54.216:41485/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-01-13 00:04:09http://172.220.54.216:53886/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-01-08 06:04:27http://172.220.54.216:40695/Mozi.mOfflineelf mirai ext Gandylyan1
2020-01-07 07:36:35http://172.220.54.216:45750/Mozi.mOfflineelf Gandylyan1
2020-01-05 02:24:02http://172.220.54.216:57945/Mozi.mOfflineelf Gandylyan1
2020-01-02 15:52:25http://172.220.54.216:44848/Mozi.mOfflineelf Gandylyan1
2019-12-25 23:59:34http://172.220.54.216:40840/Mozi.mOfflineelf mirai ext Gandylyan1