URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 112.27.124.145
Firstseen:2021-01-11 15:35:49 UTC
Total malware sites :22
Online malware sites :0 (0%)
Offline Malware sites :22 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-15 11:21:19 112.27.124.145Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-10-26 05:29:14http://112.27.124.145:37734/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-26 05:02:10http://112.27.124.145:37734/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-10-15 04:57:04http://112.27.124.145:37734/mozi.aOfflinemirai ext tammeto
2021-10-11 07:37:10http://112.27.124.145:37734/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-09-22 12:02:11http://112.27.124.145:45626/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-05 22:00:12http://112.27.124.145:45342/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-05 21:32:05http://112.27.124.145:45342/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-03 16:49:11http://112.27.124.145:45342/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-30 17:06:08http://112.27.124.145:38999/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-30 04:19:12http://112.27.124.145:38999/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-29 19:26:10http://112.27.124.145:38999/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-28 16:20:05http://112.27.124.145:38999/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-01-29 13:49:06http://112.27.124.145:46210/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-12-01 13:01:06http://112.27.124.145:52760/iOffline32-bit arm elf mirai ext geenensp
2020-12-01 12:29:04http://112.27.124.145:52760/bin.shOffline32-bit arm elf mirai ext geenensp
2020-10-26 16:04:08http://112.27.124.145:52760/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-17 16:19:05http://112.27.124.145:52760/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-10-01 10:19:05http://112.27.124.145:53597/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-25 02:34:04http://112.27.124.145:53597/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-15 23:14:05http://112.27.124.145:40729/iOffline32-bit arm elf mirai ext geenensp
2020-09-15 22:44:04http://112.27.124.145:40729/bin.shOffline32-bit arm elf mirai ext geenensp
2020-09-15 11:21:19http://112.27.124.145:40729/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-10-26 05:29:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-26 05:02:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-15 04:57:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-10-11 07:37:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-22 12:02:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-05 22:00:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-05 21:32:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-03 16:49:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-30 17:06:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-30 04:19:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-29 19:26:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-28 16:20:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-29 13:49:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-01 13:01:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-01 12:29:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-26 16:04:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-17 16:19:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-10-01 10:19:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-25 02:34:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-15 23:14:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-15 22:44:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-15 11:21:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai