URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 121.37.40.52
Firstseen:2026-03-20 09:52:05 UTC
Total malware sites :14
Online malware sites :14 (100%)
Offline Malware sites :0 (0%)
Newest active malware site :2026-03-20 09:52:32 UTC
Oldest active malware site :2026-03-20 09:52:13 UTC (Age: 3 days, 22 hours, 59 minutes)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-03-20 09:52:13 121.37.40.52ecs-121-37-40-52.compute.hwclouds-dns.comNot listedAS55990 HWCSNET- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-03-20 09:52:32http://121.37.40.52/rOnlineelf mirai ext tolisec
2026-03-20 09:52:26http://121.37.40.52/dOnlineelf gafgyt ext mirai ext tolisec
2026-03-20 09:52:25http://121.37.40.52/tOnlineelf mirai ext tolisec
2026-03-20 09:52:24http://121.37.40.52/aOnlineelf mirai ext tolisec
2026-03-20 09:52:24http://121.37.40.52/wOnlineelf mirai ext tolisec
2026-03-20 09:52:24http://121.37.40.52/sOnlineelf gafgyt ext mirai ext tolisec
2026-03-20 09:52:24http://121.37.40.52/jOnlineelf mirai ext tolisec
2026-03-20 09:52:22http://121.37.40.52/qOnlineelf mirai ext tolisec
2026-03-20 09:52:21http://121.37.40.52/fOnlineelf mirai ext tolisec
2026-03-20 09:52:21http://121.37.40.52/eOnlineelf mirai ext tolisec
2026-03-20 09:52:21http://121.37.40.52/gOnlineelf mirai ext tolisec
2026-03-20 09:52:21http://121.37.40.52/kOnlineelf mirai ext tolisec
2026-03-20 09:52:14http://121.37.40.52/hOnlineelf mirai ext tolisec
2026-03-20 09:52:13http://121.37.40.52/lOnlineelf mirai ext tolisec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-03-23 07:55:19745c3a6bc9b5ee526a5aff7e2ffc4856c729de5b733860e7e9f1c585c51885c7elfMirai
2026-03-23 06:37:12409f05aea10b21cea2cc9a41bf2575c4fc7ac2bdc13d8b83fb4f5d398f11eb73elfGafgyt
2026-03-22 16:41:32a5ad829d0667eb351f56cee35119b9fbfb5f4e835a6f2240ccf2ae4264de08c0elfMirai
2026-03-22 14:37:51a29674fdde72fc86f9687c3a82d18f2e94cae6177b25c35e61d9a4f4e4039ed1elf 
2026-03-22 13:39:27ac30ab7740e40135787025eb26fe79edc027a8baa26bbbabaa4c76e40e71e413elfMirai
2026-03-21 20:46:3177d820cc5f0aa6d8b0564991fe42f705bd42ba8bc57c5c1177142534f2239c65elfMirai
2026-03-21 15:39:428fe03f304e765f1172b0ee497b16567e5baa90cca5b15fbb8b31bfd233d4dfddelf 
2026-03-21 14:20:293008c25ab60c5397471d691d0fc7a65de533130f50933aabef6b2c00ca3118faelfMirai
2026-03-21 09:15:42cda7bf0cf0d7fabe15cc22e32dee56ae3217e6c86176e3436a07c34f829fcd38elfMirai
2026-03-21 09:14:401e1cf2f14dd48f5be6019831491ce4ae71e6d55061da02baf30b9263d5e889c7elfMirai
2026-03-21 08:49:53e87f036b421f3d4cad02a6bda6de7786166d7e87ea64096e100eeea658d5aeffelfMirai
2026-03-21 02:47:29ca5dfdcf9fc3bbe9e3e937e89870aa01f2354717561229b37b22bb41d125d9f5elfMirai
2026-03-20 22:02:06b9d45e38b403321e3732e180051192c50c0e8eda63de6bd67ae056c0b5ed56e4elfMirai
2026-03-20 21:37:354632a5635ff349865211b872bb7a8e8463acaae7354881ae1d90d4ffb8ceff2eelfMirai
2026-03-20 21:31:165df0de498faf4f98e608e4ef86474e8b706551aaf386ff85e9ab7613d11f36b0elfMirai
2026-03-20 21:22:46c6cf3e38335114df33a9add8d25c13324598ab14dcac4d464f964cf8ec5bd7aaelfMirai
2026-03-20 21:12:305b70a2722060b5ca6e91c699acfe09404303ef84411a2abba4bab5b017d86ff6elfMirai
2026-03-20 21:11:282737d317df54fa02f30ea799617d067f89a0babb426dbafdc2d50d36e1b7297belf 
2026-03-20 20:52:013e3201cdfeb646ff9ed91ee5dbc20ee67bdb92fb301a7ae2c73308e1570b41b5elf 
2026-03-20 20:48:40f7adb6895681b0a3d24a2d0780cf9c9e719a8a3a2cf3cca46bed665610139016elfMirai
2026-03-20 20:32:001d61e4b9490bd6d9ae2dc75c3a029e284bb0dba5578b0b1f607e0c5b70423204elfMirai
2026-03-20 15:58:10149182139a67e57ed056d4280ba7570b030591e87886c679b817b664d8277d3felf 
2026-03-20 15:53:532f60f97655a056851cd01186b4e22110d3360c5ed5500da061ec5e8ea6cd73b6elf 
2026-03-20 15:30:2056efd0e0002f5bee69b76a79016d64b94dab2e18e2f00a9d90df287941cabab0elfMirai
2026-03-20 15:27:4362590cf0a7da7f06cb3ed3bad11e90fdff9547eac6a15007bd9b16427867819delfMirai
2026-03-20 14:54:554373b23c8aec543833b243bff35382c1c035baa3f788b63c55f3a7feb7733a57elfMirai
2026-03-20 14:46:177c4970bcfa5e69e3056b3e8bb4d199a529e1591afbd45e41db3c809085a8f620elfMirai
2026-03-20 14:45:149a8fbed32ba36a659254f3808353ae31a3d95ee92f95360a908e386450939858elfMirai
2026-03-20 09:52:26e3f2d119f6739f2a32f04d3e4b2f6a63f0e6394e227901b169a3dadb316a6baeelfGafgyt
2026-03-20 09:52:2527777a449104d410d1d076bfc449945a0b9369206efc2b12bb9e830d7689d470elfMirai
2026-03-20 09:52:247257e6c62b97a4903ddb86f0bd4acbda04c9dfbb7e00c7f8ccc165ee6ac6cbbeelf 
2026-03-20 09:52:248b9bab8ee7f102c24f82999027b4e0ae2e49c4bb3ee7b7cb620668e55c316febelf 
2026-03-20 09:52:24fd30ffe9c1179292644f5d8bf8b5fbc95651f97569dcf55cd24a1132caf00571elf 
2026-03-20 09:52:249ff2f4873bbe69d63f49571a747c6d928ebd872c317b01486d94a845f9c0d0afelfMirai
2026-03-20 09:52:22557d4bec11c771eef7209d911c2d468a14f89227409eeec5747185545a0db6f3elfMirai
2026-03-20 09:52:21aba37cb1a7cce06e4ee5e608ec1d371feaba900b57bc28371a323cc2f1662b4delfMirai
2026-03-20 09:52:21c8fdae49133b119723a70beab1d4ef29f915d4aefeae76686a446dfa08c71775elfMirai
2026-03-20 09:52:2064095c7b4b55bea93dbe1b008e5d4a946ab991b2e01f7e7378be6fd94effe728elfMirai
2026-03-20 09:52:2053e1a20d847c1f9a445385258ff5c192d866702a37a3e2c1cb6fa76ad874b9f2elfMirai
2026-03-20 09:52:136a86cc8a48f3466f55bb73533ad3c44f555575505a7fb9b4142dd6df3a336404elfMirai
2026-03-20 09:52:12cb3110ed7e474c88b71eb8d13a2e4224ce0632dfbb5441028e49dabc0da3fd22elfMirai