URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 59.8.125.188
Firstseen:2021-01-11 15:34:34 UTC
Total malware sites :23
Online malware sites :0 (0%)
Offline Malware sites :23 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-12-31 19:06:06 59.8.125.188Not listedAS4766 KIXS-AS-KR- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-11-28 19:25:06http://59.8.125.188:49310/mozi.mOfflinemirai ext tammeto
2021-11-10 14:54:08http://59.8.125.188:56761/iOffline32-bit arm elf Mozi ext geenensp
2021-10-15 05:52:12http://59.8.125.188:42288/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-09-18 01:08:13http://59.8.125.188:41053/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-18 00:36:09http://59.8.125.188:41053/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-09-16 05:51:08http://59.8.125.188:41053/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-22 14:59:03http://59.8.125.188:38617/mozi.aOffline tammeto
2021-08-10 22:59:14http://59.8.125.188:38617/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-10 22:30:17http://59.8.125.188:38617/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-08 17:07:07http://59.8.125.188:43173/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-08-05 13:22:18http://59.8.125.188:44731/iOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-05 08:11:16http://59.8.125.188:44731/bin.shOffline32-bit arm elf mirai ext Mozi ext geenensp
2021-08-03 11:07:13http://59.8.125.188:44731/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-07-04 19:38:06http://59.8.125.188:50309/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-29 15:03:09http://59.8.125.188:50309/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2021-06-22 00:21:23http://59.8.125.188:36283/Mozi.aOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-06-20 21:08:05http://59.8.125.188:36283/Mozi.mOfflineelf mirai ext Mozi ext lrz_urlhaus
2021-02-14 06:04:10http://59.8.125.188:51345/Mozi.mOfflinemirai ext Mozi ext Gandylyan1
2021-02-10 09:09:18http://59.8.125.188:51345/Mozi.aOfflinemirai ext tammeto
2021-02-06 21:44:05http://59.8.125.188:51345/iOffline32-bit arm elf mirai ext geenensp
2021-02-05 07:55:06http://59.8.125.188:51345/bin.shOffline32-bit arm elf mirai ext geenensp
2021-01-01 00:59:04http://59.8.125.188:57282/iOffline32-bit arm elf mirai ext geenensp
2020-12-31 19:06:06http://59.8.125.188:57282/bin.shOffline32-bit arm elf mirai ext geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-11-28 19:25:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-11-10 14:54:08ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1elf  
2021-10-15 05:52:12ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1elf  
2021-09-18 01:08:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-18 00:36:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-09-16 05:51:0812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-10 22:59:1412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-10 22:30:1712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-08 17:07:0712013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-05 13:22:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-05 08:11:1612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-08-03 11:07:1312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-07-04 19:38:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-29 15:03:0912013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-22 00:21:2312013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-06-20 21:08:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-14 06:04:1012013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-10 09:09:1812013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-06 21:44:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-02-05 07:55:0612013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2021-01-01 00:59:0412013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai
2020-12-31 19:06:0512013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efelfMirai