URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 112.27.124.130
Firstseen:2020-09-18 11:34:03 UTC
Total malware sites :34
Online malware sites :0 (0%)
Offline Malware sites :34 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-18 11:34:16 112.27.124.130Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-10-11 05:45:07http://112.27.124.130:42201/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-11 03:05:05http://112.27.124.130:42201/mozi.aOfflinemirai ext tammeto
2021-10-02 10:26:11http://112.27.124.130:42201/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-02 10:22:18http://112.27.124.130:42201/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-23 03:03:07http://112.27.124.130:35982/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2021-09-05 05:29:32http://112.27.124.130:36843/mozi.aOffline tammeto
2021-08-10 05:48:12http://112.27.124.130:36843/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-10 05:19:21http://112.27.124.130:36843/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-05 03:05:08http://112.27.124.130:36843/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-24 11:38:33http://112.27.124.130:41662/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-21 14:19:13http://112.27.124.130:41662/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-19 18:35:07http://112.27.124.130:41662/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-02 23:08:06http://112.27.124.130:59795/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-01 10:04:47http://112.27.124.130:59795/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-06-28 18:50:11http://112.27.124.130:59795/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-27 07:19:05http://112.27.124.130:59795/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-21 17:49:14http://112.27.124.130:39028/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-19 16:29:05http://112.27.124.130:39028/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-06-16 21:13:19http://112.27.124.130:39028/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-06-11 14:50:08http://112.27.124.130:39028/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-05-30 03:39:08http://112.27.124.130:45108/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-28 21:05:15http://112.27.124.130:45108/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-05-23 10:18:08http://112.27.124.130:45108/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-14 08:04:18http://112.27.124.130:45108/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-03-25 00:16:09http://112.27.124.130:39528/bin.shOffline32-bit arm elf mirai ext geenensp
2021-03-24 13:40:07http://112.27.124.130:39528/iOffline32-bit arm elf mirai ext geenensp
2021-02-10 09:10:11http://112.27.124.130:39528/Mozi.aOfflinemirai ext tammeto
2021-02-08 11:49:05http://112.27.124.130:39528/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-15 13:04:04http://112.27.124.130:35537/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-09 18:39:08http://112.27.124.130:35537/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-19 19:19:04http://112.27.124.130:56516/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-16 07:42:04http://112.27.124.130:56516/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-21 04:50:06http://112.27.124.130:58098/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-18 11:34:16http://112.27.124.130:51770/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-10-11 05:45:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-11 03:05:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-02 10:26:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-02 10:22:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-23 03:03:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-10 05:48:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-10 05:19:2112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-05 03:05:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-24 11:56:3212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-21 14:19:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-19 18:35:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-02 23:08:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-01 10:17:2312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-28 18:50:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-27 07:19:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-21 17:49:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-19 16:29:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-16 21:13:1912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-11 14:50:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-30 03:39:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-28 21:05:1512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-23 10:18:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-14 08:04:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-25 00:16:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-24 13:40:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-10 09:10:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-08 11:49:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-15 13:04:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-09 18:39:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-19 19:19:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-16 07:42:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-21 04:50:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-18 11:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai