URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 112.27.124.139
Firstseen:2020-09-20 18:56:03 UTC
Total malware sites :37
Online malware sites :0 (0%)
Offline Malware sites :37 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-20 18:56:15 112.27.124.139Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-11-05 03:42:05http://112.27.124.139:48406/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-11-02 17:46:04http://112.27.124.139:48406/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-27 19:31:06http://112.27.124.139:48406/mozi.mOfflinemirai ext tammeto
2021-10-27 17:35:05http://112.27.124.139:48406/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-21 20:19:33http://112.27.124.139:57161/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-16 05:19:16http://112.27.124.139:57161/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-10-13 22:20:06http://112.27.124.139:57161/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-07 15:44:14http://112.27.124.139:57161/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-28 05:44:07http://112.27.124.139:50395/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-27 20:55:05http://112.27.124.139:50395/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-21 11:19:05http://112.27.124.139:50395/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-07 11:20:05http://112.27.124.139:60287/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-06 05:24:13http://112.27.124.139:60287/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-06 04:56:12http://112.27.124.139:60287/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-02 13:34:12http://112.27.124.139:60287/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-23 08:19:11http://112.27.124.139:36161/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-20 05:04:37http://112.27.124.139:48035/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-13 12:04:09http://112.27.124.139:48290/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-13 09:49:09http://112.27.124.139:48290/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-08 00:04:08http://112.27.124.139:48290/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-23 21:03:51http://112.27.124.139:51679/Mozi.mOfflineMozi ext Gandylyan1
2021-05-23 10:22:21http://112.27.124.139:51679/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-21 01:04:17http://112.27.124.139:51679/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-05-10 02:34:10http://112.27.124.139:41139/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-05-02 05:01:12http://112.27.124.139:41139/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-02 03:36:08http://112.27.124.139:41139/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-04-27 11:35:08http://112.27.124.139:41139/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-04-23 21:03:04http://112.27.124.139:39782/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2021-03-16 11:04:07http://112.27.124.139:39782/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-02-26 18:16:06http://112.27.124.139:39782/iOffline32-bit arm elf mirai ext geenensp
2021-02-26 17:51:05http://112.27.124.139:39782/bin.shOffline32-bit arm elf mirai ext geenensp
2020-12-04 21:13:05http://112.27.124.139:33398/bin.shOffline32-bit arm elf mirai ext geenensp
2020-11-20 06:34:04http://112.27.124.139:33398/iOffline32-bit arm elf mirai ext geenensp
2020-10-24 08:49:04http://112.27.124.139:33398/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-18 17:04:04http://112.27.124.139:33398/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-30 10:44:25http://112.27.124.139:60724/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-20 18:56:15http://112.27.124.139:56186/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-11-05 03:42:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-02 17:46:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-27 19:31:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-27 17:35:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-21 20:41:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-16 05:19:1612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-13 22:20:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-07 15:44:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-28 05:44:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-27 20:55:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-21 11:19:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-07 11:20:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-06 05:24:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-06 04:56:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-02 13:34:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-23 08:19:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-21 18:30:2012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-13 12:04:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-13 09:49:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-08 00:04:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-23 10:22:2112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-21 01:04:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-10 02:34:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-02 05:01:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-02 03:36:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-27 11:35:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-23 21:03:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-16 11:04:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-26 18:16:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-26 17:51:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-04 21:13:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-20 06:34:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-24 08:49:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-18 17:04:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-30 10:44:2512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-20 18:56:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai