URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 111.42.103.51
Firstseen:2019-12-23 07:10:42 UTC
Total malware sites :27
Online malware sites :0 (0%)
Offline Malware sites :27 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-23 07:10:48 111.42.103.51Not listedAS132525 CMNET-HEILONGJIANG-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-07-25 00:06:52http://111.42.103.51:49741/Mozi.mOfflineMozi ext Gandylyan1
2020-07-11 03:05:03http://111.42.103.51:38941/Mozi.mOfflineMozi ext Gandylyan1
2020-07-01 00:03:09http://111.42.103.51:56922/Mozi.mOfflineMozi ext Gandylyan1
2020-05-18 22:00:05http://111.42.103.51:43855/Mozi.mOfflinebashlite elf gafgyt ext zbetcheckin
2020-05-14 00:04:33http://111.42.103.51:51753/Mozi.mOfflineMozi ext Gandylyan1
2020-05-10 00:04:35http://111.42.103.51:50768/Mozi.mOfflineMozi ext Gandylyan1
2020-05-07 18:04:40http://111.42.103.51:55627/Mozi.mOfflineMozi ext Gandylyan1
2020-05-03 03:05:47http://111.42.103.51:52214/Mozi.mOfflineMozi ext Gandylyan1
2020-04-05 12:03:10http://111.42.103.51:51147/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-05 00:04:40http://111.42.103.51:45586/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-30 12:05:42http://111.42.103.51:54514/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-23 21:03:08http://111.42.103.51:41417/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-07 12:04:14http://111.42.103.51:33979/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-03 00:05:13http://111.42.103.51:54824/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-21 06:04:55http://111.42.103.51:44636/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-20 00:07:55http://111.42.103.51:44628/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-08 19:05:37http://111.42.103.51:41339/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-06 05:05:05http://111.42.103.51:54244/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-01 05:04:54http://111.42.103.51:52522/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-29 14:06:48http://111.42.103.51:36091/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-23 20:04:15http://111.42.103.51:46643/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-14 14:05:17http://111.42.103.51:34855/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-11 09:04:51http://111.42.103.51:46391/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-08 03:05:16http://111.42.103.51:45590/Mozi.mOfflineelf Gandylyan1
2020-01-05 18:43:04http://111.42.103.51:54072/Mozi.mOfflineelf Gandylyan1
2019-12-29 19:10:50http://111.42.103.51:58718/Mozi.mOfflineelf Gandylyan1
2019-12-23 07:10:48http://111.42.103.51:45337/Mozi.mOfflineelf Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-07-25 00:06:52bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-07-11 03:05:03bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-07-01 00:03:09bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-18 22:00:05bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-14 00:04:33bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-10 00:04:35bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-07 18:04:40bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-03 03:05:47bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-05 12:03:10bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-05 00:04:40bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-30 12:05:42bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-23 21:03:08bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-07 12:04:14bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-03 00:05:13bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-21 06:04:55bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-20 00:07:55bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-08 19:05:37bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-06 05:05:05bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-01 05:04:54bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-29 14:06:48bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-23 20:04:15bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-14 14:05:17bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-11 09:04:51bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-08 03:05:16bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-05 18:43:04bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-29 19:10:50bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-23 07:10:44bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf