URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 112.198.140.250
Firstseen:2025-03-24 07:32:03 UTC
Total malware sites :13
Online malware sites :0 (0%)
Offline Malware sites :13 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-03-24 07:32:06 112.198.140.250Not listedAS132199 GLOBE-MOBILE-5TH-GEN-AS- PHyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-03-23 21:48:14http://112.198.140.250:56648/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-08-11 02:55:06http://112.198.140.250:57541/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-08-11 02:27:07http://112.198.140.250:57541/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-05-18 18:06:09http://112.198.140.250:52474/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-05-18 15:04:14http://112.198.140.250:52474/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-04-15 09:28:09http://112.198.140.250:48101/S95baby.shOfflinemirai ext iLikeMalware
2025-04-12 16:20:15http://112.198.140.250:48101/Mozi.mOfflinemirai ext iLikeMalware
2025-04-12 16:20:15http://112.198.140.250:48101/bin.shOfflinemirai ext Mozi ext iLikeMalware
2025-04-04 11:24:08http://112.198.140.250:48101/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-03-29 12:08:13http://112.198.140.250:51745/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-03-29 11:41:05http://112.198.140.250:51745/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-03-24 07:56:07http://112.198.140.250:55213/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2025-03-24 07:32:06http://112.198.140.250:55213/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp