URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 111.42.102.149
Firstseen:2019-12-19 15:47:06 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-19 15:47:16 111.42.102.149Not listedAS132525 CMNET-HEILONGJIANG-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-06-02 18:03:08http://111.42.102.149:50076/Mozi.mOfflineMozi ext Gandylyan1
2020-05-08 06:04:23http://111.42.102.149:37389/Mozi.mOfflineMozi ext Gandylyan1
2020-04-30 18:05:41http://111.42.102.149:44137/Mozi.mOfflineMozi ext Gandylyan1
2020-03-28 18:05:16http://111.42.102.149:50136/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-25 21:04:18http://111.42.102.149:37718/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-12 06:04:09http://111.42.102.149:41849/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-27 16:03:40http://111.42.102.149:54222/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-21 18:04:43http://111.42.102.149:51875/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-16 08:06:39http://111.42.102.149:33653/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-04 04:04:10http://111.42.102.149:57840/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-17 17:04:52http://111.42.102.149:44653/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-15 09:04:31http://111.42.102.149:54315/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-11 00:05:40http://111.42.102.149:39404/Mozi.mOfflineelf Mozi ext Gandylyan1
2019-12-30 11:42:11http://111.42.102.149:55588/Mozi.mOfflineelf Gandylyan1
2019-12-28 12:15:11http://111.42.102.149:60899/Mozi.mOfflineelf Gandylyan1
2019-12-25 19:33:15http://111.42.102.149:56498/Mozi.mOfflineelf Gandylyan1
2019-12-19 15:47:16http://111.42.102.149:58398/Mozi.mOfflineelf Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-06-02 18:03:08bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-08 06:04:23bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-30 18:05:41bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-28 18:05:16bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-25 21:04:18bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-12 06:04:09bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-27 16:03:40bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-21 18:04:43bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-16 09:36:11bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-04 04:04:10bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-17 17:04:52bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-15 09:04:31bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-11 00:05:40bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-30 11:42:11bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-28 12:15:11bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-25 19:33:15bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-19 15:47:09bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf