URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 120.224.242.151
Firstseen:2020-10-17 08:35:03 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-10-17 08:35:11 120.224.242.151Not listedAS24444 CMNET-V4shandong-AS-AP- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-12-26 20:23:05http://120.224.242.151:4214/iOffline32-bit elf mips mirai ext Mozi ext geenensp
2021-12-26 19:54:33http://120.224.242.151:4214/bin.shOffline32-bit elf mips mirai ext Mozi ext geenensp
2021-12-17 17:05:14http://120.224.242.151:4214/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-12-11 18:03:05http://120.224.242.151:4214/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2021-12-08 11:04:08http://120.224.242.151:16990/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-11-20 00:20:06http://120.224.242.151:8853/mozi.mOffline tammeto
2021-10-25 08:35:05http://120.224.242.151:52443/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-09-12 00:43:19http://120.224.242.151:30184/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-09-09 09:20:12http://120.224.242.151:30184/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-06-26 09:52:42http://120.224.242.151:60764/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-06-24 23:05:14http://120.224.242.151:60764/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-05-28 01:51:17http://120.224.242.151:12169/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-05-27 16:34:11http://120.224.242.151:12169/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-04-16 01:35:05http://120.224.242.151:31839/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-01-15 22:44:06http://120.224.242.151:19906/iOffline32-bit elf mips geenensp
2021-01-15 22:14:07http://120.224.242.151:19906/bin.shOffline32-bit elf mips geenensp
2020-10-17 08:35:11http://120.224.242.151:17912/Mozi.mOfflineelf Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-12-26 20:23:049e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600elfMirai
2021-12-26 20:12:109e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600elfMirai
2021-12-17 17:05:149e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600elfMirai
2021-12-11 18:03:059e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600elfMirai
2021-12-08 11:04:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-11-20 00:20:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-10-25 08:35:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-12 00:43:19f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-09 09:20:12f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-06-26 09:57:11f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-06-24 23:05:14f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-05-28 01:51:17f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-05-27 16:34:11f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-16 01:35:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-01-15 22:44:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-01-15 22:14:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-10-17 08:35:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf