URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 72.2.248.221
Firstseen:2020-02-01 12:06:29 UTC
Total malware sites :8
Online malware sites :0 (0%)
Offline Malware sites :8 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-02-01 12:06:30 72.2.248.22172-2-248-221.pool.dsl.bbtel.comNot listedAS26727 BBTEL- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-02-18 14:07:27http://72.2.248.221:56420/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-17 08:05:19http://72.2.248.221:44486/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-09 12:05:00http://72.2.248.221:35816/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-08 14:05:52http://72.2.248.221:49649/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-06 15:04:53http://72.2.248.221:36029/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-05 12:08:43http://72.2.248.221:52051/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-02 19:07:32http://72.2.248.221:32887/Mozi.mOfflineelf mirai ext Mozi ext Gandylyan1
2020-02-01 12:06:30http://72.2.248.221:35963/Mozi.mOfflineelf Mozi ext Gandylyan1