112.248.103.215
Classification: Malicious
112.248.103.215 is a malicious IP address in Zibo, CN. 6 sightings from URLhaus Abuse.ch and Threat Observatory (Malware Download), last seen 2026-11-06.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
- Malware distribution — This indicator is distributing malware.
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in CO.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mozi | Maltiverse Threat Observatory | 2026-11-04 02:50:29 | 2026-11-06 21:50:31 | botnet country_code:co malicious-activity | |
| Mirai | Maltiverse Threat Observatory | 2026-11-05 01:27:15 | 2026-11-05 22:26:50 | country_code:co malicious-activity malware | |
| Malware Download | URLhaus Abuse.ch | 2022-10-01 03:15:08 | 2026-11-04 00:47:06 | malicious-activity malware |
Tags
malware_download 32-bit elf mips moziWhois information
- AS name
- AS4837 China Unicom Shandong province network
- AS registry
- apnic
- AS date
- 2009-02-11 00:00:00
- AS CIDR
- 112.224.0.0/11
- CIDR
- 112.224.0.0/11
- Registrant
- China Unicom Shandong province network
- Address
- No.21,Financial Street Beijing,100033 P.R.China
- City
- Zibo
- Postal code
- 255000
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected]
- First indexed
- 2022-10-01 03:15:08
- Last updated
- 2026-11-06 22:10:06
Malicious IPs in the same CIDR
112.239.98.112 112.248.103.215 112.255.200.63 112.248.3.168 112.252.231.104 112.239.120.150 112.248.109.159 112.255.126.89 112.239.103.43 112.250.243.72 112.235.46.128 112.237.2.80 112.251.18.12 112.248.2.26 112.248.104.187 112.239.98.92 112.246.176.61 112.255.200.13 112.238.159.249 112.255.5.11 112.238.149.250 112.255.202.130 112.250.210.200 112.255.6.24 112.239.70.25