URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 111.38.121.222
Firstseen:2021-01-11 15:35:31 UTC
Total malware sites :31
Online malware sites :0 (0%)
Offline Malware sites :31 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-10-15 03:49:14 111.38.121.222Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-02-12 09:18:33http://111.38.121.222:34670/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2022-01-09 02:58:33http://111.38.121.222:45730/mozi.aOffline tammeto
2021-11-29 02:37:34http://111.38.121.222:45730/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-11-28 10:11:09http://111.38.121.222:45730/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-11-26 03:08:07http://111.38.121.222:45730/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-09 04:19:10http://111.38.121.222:54774/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-02 23:36:05http://111.38.121.222:54774/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-11-02 23:04:05http://111.38.121.222:54774/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-27 03:34:11http://111.38.121.222:54774/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-09-01 16:42:14http://111.38.121.222:42987/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-26 20:58:34http://111.38.121.222:42987/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-24 00:34:14http://111.38.121.222:42987/Mozi.aOfflinemirai ext lrz_urlhaus
2021-08-17 12:19:06http://111.38.121.222:42987/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-13 10:49:08http://111.38.121.222:43482/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-07 19:37:18http://111.38.121.222:51862/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-05 20:35:09http://111.38.121.222:51862/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-04 01:47:11http://111.38.121.222:51862/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-31 03:34:10http://111.38.121.222:51862/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-30 00:52:39http://111.38.121.222:34572/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-21 03:27:42http://111.38.121.222:39014/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-19 17:05:19http://111.38.121.222:59992/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-05-13 22:40:08http://111.38.121.222:50939/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-13 20:06:05http://111.38.121.222:50939/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-03-28 08:20:11http://111.38.121.222:55414/iOffline32-bit arm elf mirai ext geenensp
2021-03-28 07:54:05http://111.38.121.222:55414/bin.shOffline32-bit arm elf mirai ext geenensp
2021-03-25 03:49:14http://111.38.121.222:55414/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-12-10 21:04:10http://111.38.121.222:55071/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-12-09 23:34:05http://111.38.121.222:55071/bin.shOffline32-bit arm elf mirai ext geenensp
2020-12-06 15:10:07http://111.38.121.222:55071/iOffline32-bit arm elf mirai ext geenensp
2020-11-19 08:49:06http://111.38.121.222:55071/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-15 03:49:14http://111.38.121.222:52792/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-02-12 09:39:0112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-29 02:50:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-28 10:11:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-26 03:08:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-09 04:19:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-02 23:36:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-02 23:04:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-27 03:34:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-01 16:42:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-26 21:49:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-24 00:34:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-17 12:19:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-13 10:49:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-07 19:37:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-05 20:35:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-04 01:47:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-31 03:34:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-30 01:16:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-21 19:09:4012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-19 17:05:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-13 22:40:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-13 20:06:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-28 08:20:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-28 07:54:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-25 03:49:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-10 21:04:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-09 23:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-06 15:10:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-19 08:49:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-15 03:49:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai