URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 120.193.91.196
Firstseen:2020-09-16 15:06:06 UTC
Total malware sites :37
Online malware sites :0 (0%)
Offline Malware sites :37 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-09-16 15:06:20 120.193.91.196Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-03-08 20:31:07http://120.193.91.196:48527/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2022-03-08 01:41:05http://120.193.91.196:48527/mozi.aOfflinemirai ext tammeto
2022-03-03 18:57:05http://120.193.91.196:48527/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2022-02-23 16:06:07http://120.193.91.196:48527/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2022-01-20 14:49:08http://120.193.91.196:51604/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2022-01-16 22:35:06http://120.193.91.196:51604/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2022-01-12 03:53:05http://120.193.91.196:51604/mozi.mOfflinemirai ext tammeto
2022-01-11 12:45:06http://120.193.91.196:51604/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2022-01-05 16:22:12http://120.193.91.196:48465/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2022-01-04 10:46:11http://120.193.91.196:48465/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-11-13 01:04:05http://120.193.91.196:57173/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-11-11 14:46:05http://120.193.91.196:57173/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-11-10 01:05:38http://120.193.91.196:57173/Mozi.aOfflinemirai ext Mozi ext Petras_Simeon
2021-09-16 11:20:15http://120.193.91.196:46472/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-09-05 16:34:12http://120.193.91.196:46472/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-01 12:08:05http://120.193.91.196:46472/mozi.aOfflinemirai ext tammeto
2021-08-02 10:14:08http://120.193.91.196:36331/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-02 08:58:06http://120.193.91.196:36331/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-30 14:06:09http://120.193.91.196:36331/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-11 18:38:07http://120.193.91.196:43320/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-11 17:59:37http://120.193.91.196:43320/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-07-10 22:31:09http://120.193.91.196:43320/Mozi.mOfflineelf mirai ext Mozi ext Petras_Simeon
2021-05-29 13:52:11http://120.193.91.196:47245/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-05-22 21:45:08http://120.193.91.196:47245/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-05-20 17:09:24http://120.193.91.196:47245/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-04-29 04:54:18http://120.193.91.196:60800/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-04-25 22:35:09http://120.193.91.196:60800/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-04-19 00:50:18http://120.193.91.196:49091/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-04-15 02:21:07http://120.193.91.196:49091/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-03-25 00:22:09http://120.193.91.196:34465/bin.shOffline32-bit arm elf mirai ext geenensp
2021-03-23 13:04:06http://120.193.91.196:34465/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-03-08 10:24:06http://120.193.91.196:34465/iOffline32-bit arm elf mirai ext geenensp
2021-02-09 08:34:04http://120.193.91.196:34465/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-12-04 12:51:05http://120.193.91.196:41423/iOffline32-bit arm elf mirai ext geenensp
2020-12-04 11:54:04http://120.193.91.196:41423/bin.shOffline32-bit arm elf mirai ext geenensp
2020-09-17 21:30:06http://120.193.91.196:41423/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2020-09-16 15:06:20http://120.193.91.196:41423/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-03-08 20:31:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-03-08 01:41:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-03-03 18:57:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-02-23 16:06:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-01-20 14:49:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-01-16 22:35:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-01-12 03:53:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-01-11 12:45:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-01-05 16:22:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2022-01-04 10:46:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-13 01:04:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-11 14:46:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-10 01:05:3812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-16 11:20:1512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-05 16:34:1212013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-01 12:08:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-02 10:14:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-02 08:58:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-30 14:06:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-12 03:05:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-11 18:38:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-11 09:51:2012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-29 13:52:1112013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-22 21:45:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-05-20 17:09:2412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-29 04:54:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-25 22:35:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-19 00:50:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-04-15 02:21:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-25 00:22:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-23 13:04:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-03-08 10:24:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-09 08:34:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-04 12:51:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-04 11:54:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-17 21:30:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-09-16 15:06:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai