URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 118.46.104.164
Firstseen:2020-01-14 18:04:33 UTC
Total malware sites :11
Online malware sites :0 (0%)
Offline Malware sites :11 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-01-14 18:04:36 118.46.104.164Not listedAS4766 KIXS-AS-KR- KRyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-12-11 06:32:05http://118.46.104.164:47948/iOffline32-bit arm elf mirai ext geenensp
2020-12-11 06:04:09http://118.46.104.164:47948/bin.shOffline32-bit arm elf mirai ext geenensp
2020-11-30 02:20:06http://118.46.104.164:41876/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-27 22:19:33http://118.46.104.164:56253/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-27 12:49:06http://118.46.104.164:55851/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-13 14:35:06http://118.46.104.164:36087/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-11-12 10:49:05http://118.46.104.164:36087/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-22 10:19:06http://118.46.104.164:54837/iOffline32-bit arm elf mirai ext geenensp
2020-09-22 10:11:06http://118.46.104.164:54837/bin.shOffline32-bit arm elf mirai ext geenensp
2020-09-22 06:28:48http://118.46.104.164:54837/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-01-14 18:04:36http://118.46.104.164:41649/Mozi.mOfflineelf Mozi ext Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-12-11 06:32:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-11 06:04:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-30 02:20:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-27 22:34:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-27 12:49:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-13 14:35:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-11-12 10:49:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-22 10:19:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-22 10:11:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-22 06:28:4812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-02-16 16:15:3472fe184785593f47c79f2d980d65b98e65eb7cefd492b959b481f53151090af8elf  
2020-02-15 13:31:414fa50bfd25778b73dd7959638a6928801185b472c9a100d49a2d77754776632aelf  
2020-02-07 06:35:004704cab4dbab66c8df50d367d709bd2f91aa2592d5989d18858457ce10bab444elf  
2020-01-27 22:09:27c26a57fb134241d83d542a402bae716c590bbfa1547eff0b4143906c8c96595eelf  
2020-01-22 03:56:118e321edcf6aae10977c1202f4e7cfec6f853dce48a77955e1fe1390f01102e10elf  
2020-01-14 18:04:36190c13563be0e74e5ffccea34bd63103177ecc4c8a764e1d6c6898a54e9ae70aelf