URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name). This page shows all malware URLs that are associated with the host 112.126.94.107.

Database Entry


Host:112.126.94.107
Spamhaus DBL:Unknown
SURBL:Not listed
Firstseen:2018-04-02 17:05:59

IP addresses


The table below shows all IP address obsered for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones).

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2018-04-16 05:24:40112.126.94.107Not listedAS37963 CNNIC-ALIBABA-CN-NET-AP Hangzhou Alibaba Advertising Co.,Ltd.- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particulare host.

Dateadded (UTC)URLStatusTagsGSBReporter
2018-05-03 09:16:52http://112.126.94.107/shop/d.docOfflinedoc malware payload Ransomware Clean@JAMESWT_MHT
2018-05-03 09:16:36http://112.126.94.107/shop/k.exeOfflinedoc malware payload Ransomware Clean@JAMESWT_MHT
2018-04-02 17:06:27http://112.126.94.107/shop/ok.exeOfflineexe GandCrab Clean@cocaman