URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | moobot.serveftp.com |
|---|---|
| Domain registrar: | No-IP ![]() |
| Domain registration date: | 2001-06-01 21:14:32 UTC |
| Abuse complaint sent?: | Yes (2026-07-11 10:18:02 UTC to kbussche{at}noip[dot]com) |
| Spamhaus DBL : | Abused domain (phishing) |
| SURBL : | Not blocked |
| Quad9 : | Blocked |
| AdGuard : | Not blocked |
| Cloudflare : | Blocked |
| ProtonDNS : | Not blocked |
| OpenBLD : | Blocked |
| DNS4EU : | Not blocked |
| Control D HaGeZi : | Blocked |
| Firstseen: | 2026-07-11 10:17:13 UTC |
| Total malware sites : | 8 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 8 (100%) |
| A record(s) observed : | 2 |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-07-11 10:17:22 | 103.130.215.73 | Not listed | AS135953 BKHOST-AS-VN | VN | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2026-07-11 10:32:34 | http://moobot.serveftp.com/x86_64 | Offline | botnetdomain elf mirai | |
| 2026-07-11 10:32:29 | http://moobot.serveftp.com/arm6 | Offline | botnetdomain elf mirai | |
| 2026-07-11 10:32:29 | http://moobot.serveftp.com/mips | Offline | botnetdomain elf mirai | |
| 2026-07-11 10:32:29 | http://moobot.serveftp.com/arm7 | Offline | botnetdomain elf mirai | |
| 2026-07-11 10:32:29 | http://moobot.serveftp.com/mipsel | Offline | botnetdomain elf mirai | |
| 2026-07-11 10:17:32 | http://moobot.serveftp.com/arm5 | Offline | botnetdomain elf mirai | |
| 2026-07-11 10:17:30 | http://moobot.serveftp.com/arm | Offline | botnetdomain elf mirai | |
| 2026-07-11 10:17:22 | http://moobot.serveftp.com///arm5 | Offline | botnetdomain elf mirai |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2026-07-11 10:32:34 | 597711ab59a6671e9c6f8e4212a6a3ca2396fd30e6314d7b46c24d329e719a3f | elf | Mirai | |
| 2026-07-11 10:32:28 | 056fe98ea74350671b92200b7ec69cb79bf2c389e9a08392b9feaefcd46912da | elf | Mirai | |
| 2026-07-11 10:32:28 | 15e2819ed08fa0daa1a860bc198fd91ad35a67f35bf4dc8f27a785bbd9393384 | elf | Mirai | |
| 2026-07-11 10:32:28 | d3ddb82e055831f0106bb5ca4e54b632c4332bd0b749d89f1124b333af93d608 | elf | Mirai | |
| 2026-07-11 10:32:28 | b3e2986e69683d452f04b4305f5454f03bda2b8a6fce080a97ea9d77699291b1 | elf | Mirai | |
| 2026-07-11 10:17:31 | 0bfa168904c244a3e126040f7b5c675044f8da1a98e533c71c3f2b7c74922d25 | elf | Mirai | |
| 2026-07-11 10:17:29 | d623e58c95bfcedd6ad8d02bd4ad7adf98150e8781f37ab9bcd2547b59d5f901 | elf | Mirai | |
| 2026-07-11 10:17:22 | 0bfa168904c244a3e126040f7b5c675044f8da1a98e533c71c3f2b7c74922d25 | elf | Mirai |

VN