URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 112.27.124.132
Firstseen:2020-09-07 21:49:02 UTC
Total malware sites :27
Online malware sites :0 (0%)
Offline Malware sites :27 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-07 21:49:11 112.27.124.132Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-11-15 06:04:35http://112.27.124.132:44526/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-15 14:19:12http://112.27.124.132:54277/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-10 03:57:08http://112.27.124.132:54277/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-08 18:07:13http://112.27.124.132:54277/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-26 20:17:05http://112.27.124.132:53673/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-26 19:20:05http://112.27.124.132:53673/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-24 20:10:04http://112.27.124.132:53673/mozi.mOfflinemirai ext tammeto
2021-08-07 21:25:12http://112.27.124.132:51363/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-07 20:55:33http://112.27.124.132:51363/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-07 18:57:04http://112.27.124.132:51363/mozi.mOfflinemirai ext tammeto
2021-08-06 05:04:07http://112.27.124.132:51363/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-02-17 15:34:05http://112.27.124.132:44425/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-02-15 22:34:05http://112.27.124.132:44425/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-01-02 09:11:06http://112.27.124.132:40133/iOffline32-bit arm elf mirai ext geenensp
2021-01-02 08:07:04http://112.27.124.132:40133/bin.shOffline32-bit arm elf mirai ext geenensp
2020-11-27 08:19:05http://112.27.124.132:40133/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-26 05:34:05http://112.27.124.132:40133/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-27 09:20:06http://112.27.124.132:49640/bin.shOffline32-bit arm elf mirai ext geenensp
2020-10-27 07:33:04http://112.27.124.132:49640/iOffline32-bit arm elf mirai ext geenensp
2020-10-21 15:04:11http://112.27.124.132:49640/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-18 23:34:07http://112.27.124.132:49640/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-05 01:57:05http://112.27.124.132:43628/iOffline32-bit arm elf mirai ext geenensp
2020-10-05 01:46:04http://112.27.124.132:43628/bin.shOffline32-bit arm elf mirai ext geenensp
2020-09-22 06:33:34http://112.27.124.132:43628/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-13 22:36:46http://112.27.124.132:58250/Mozi.xOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-08 01:34:04http://112.27.124.132:58250/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-07 21:49:11http://112.27.124.132:58250/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-11-15 06:17:2512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-15 14:19:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-10 03:57:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-08 18:07:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-26 20:17:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-26 19:20:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-24 20:10:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-07 21:25:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-07 21:15:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-07 18:57:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-06 05:04:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-17 15:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-15 22:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-02 09:11:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-02 08:07:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-27 08:19:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-26 05:34:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-27 09:20:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-27 07:33:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-21 15:04:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-18 23:34:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-05 01:57:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-05 01:46:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-22 06:33:3412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-13 22:36:4612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-08 01:34:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-07 21:49:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai