URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	38.55.99.215
Firstseen:	2026-09-10 18:30:15 UTC
Total malware sites :	7
Online malware sites :	3 (43%)
Offline Malware sites :	4 (57%)
Newest active malware site :	2026-09-10 18:30:39 UTC
Oldest active malware site :	2026-09-10 18:30:35 UTC (Age: 12 hours, 46 minutes)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-09-10 18:30:18	38.55.99.215		Not listed	AS42960 VH-GLOBAL	HK	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-09-10 18:31:15	http://38.55.99.215:8080/moot_bot.py	Offline	python	von
2026-09-10 18:31:13	http://38.55.99.215:8080/bot_agent.py	Offline		von
2026-09-10 18:30:39	http://38.55.99.215:8080/moot.arm	Online	elf mirai	von
2026-09-10 18:30:36	http://38.55.99.215:8080/moot.mips	Online	elf mirai	von
2026-09-10 18:30:35	http://38.55.99.215:8080/moot.x86_64	Online	mirai	von
2026-09-10 18:30:18	http://38.55.99.215:8080/moot_loader.sh	Offline		von
2026-09-10 18:30:18	http://38.55.99.215:8080/shellbot.sh	Offline	script	von

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2026-09-10 18:30:39	fd0f24d81fa6a641e9d36bc57e3c2503e7d70e92f2b2cb7797514b3f560fe1c4	elf	Mirai
2026-09-10 18:30:35	fec4e9a87bdf1e79991acb5c28bc601c6314d21caf57bec4cb7ecbabb493e8ac	elf	Mirai
2026-09-10 18:30:35	8eb45905f5cd0f67e50fac45141dc3c9f699772a2ea432902a1eda509f215380	elf	Mirai