URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 111.42.66.179
Firstseen:2019-12-19 05:50:31 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-19 05:50:38 111.42.66.179Not listedAS132525 CMNET-HEILONGJIANG-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-04-19 06:04:22http://111.42.66.179:59769/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-18 06:04:13http://111.42.66.179:50966/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-21 21:05:56http://111.42.66.179:41650/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-16 12:06:42http://111.42.66.179:55275/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-12 00:05:14http://111.42.66.179:48202/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-04 09:05:10http://111.42.66.179:55314/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-27 12:04:49http://111.42.66.179:38334/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-14 16:04:09http://111.42.66.179:44100/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-11 08:07:04http://111.42.66.179:49020/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-06 19:04:22http://111.42.66.179:44956/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-29 21:05:09http://111.42.66.179:60323/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-22 17:04:38http://111.42.66.179:55283/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-11 22:04:54http://111.42.66.179:42085/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-10 11:04:27http://111.42.66.179:47697/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-04 11:53:33http://111.42.66.179:56429/Mozi.mOfflineelf Gandylyan1
2019-12-21 23:04:49http://111.42.66.179:44112/Mozi.mOfflineelf Gandylyan1
2019-12-19 05:50:38http://111.42.66.179:44668/Mozi.mOfflineelf Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-04-19 06:04:22bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-18 06:04:13bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-21 21:05:56bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-16 12:06:42bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-12 00:05:14bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-04 09:05:10bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-27 12:04:49bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-14 16:04:09bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-11 09:50:13bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-06 19:04:22bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-29 21:05:09bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-22 17:04:38bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-11 22:04:54bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-10 11:04:27bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-04 11:53:33bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-21 23:04:49bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-19 05:50:33bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf