URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 111.40.79.79
Firstseen:2019-12-25 17:04:19 UTC
Total malware sites :13
Online malware sites :0 (0%)
Offline Malware sites :13 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-25 17:04:25 111.40.79.79Not listedAS132525 CMNET-HEILONGJIANG-CN- CNyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-05-01 00:05:48http://111.40.79.79:34819/Mozi.mOfflineMozi ext Gandylyan1
2020-04-29 00:03:32http://111.40.79.79:49979/Mozi.mOfflineDDoS Bot elf mirai ext Mozi ext Gandylyan1
2020-04-15 03:04:04http://111.40.79.79:35045/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-06 15:07:54http://111.40.79.79:37995/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-04 03:04:52http://111.40.79.79:34937/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-27 09:04:57http://111.40.79.79:37614/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-02 12:05:44http://111.40.79.79:44378/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-01 09:05:58http://111.40.79.79:56233/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-24 03:14:08http://111.40.79.79:50148/iOfflinebashlite elf gafgyt ext zbetcheckin
2020-02-10 02:05:30http://111.40.79.79:40610/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-22 11:04:04http://111.40.79.79:55285/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-15 01:04:25http://111.40.79.79:38966/Mozi.mOfflineelf Mozi ext Gandylyan1
2019-12-25 17:04:25http://111.40.79.79:33678/Mozi.mOfflineelf Gandylyan1