URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 111.42.66.41
Firstseen:2019-12-21 23:23:52 UTC
Total malware sites :20
Online malware sites :0 (0%)
Offline Malware sites :20 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-21 23:24:00 111.42.66.41Not listedAS132525 CMNET-HEILONGJIANG-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-05-08 09:04:10http://111.42.66.41:41988/Mozi.mOfflineMozi ext Gandylyan1
2020-05-07 18:04:08http://111.42.66.41:49906/Mozi.mOfflineMozi ext Gandylyan1
2020-04-23 06:06:53http://111.42.66.41:58600/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-20 09:06:51http://111.42.66.41:58442/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-11 03:07:21http://111.42.66.41:47069/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-20 12:06:30http://111.42.66.41:37544/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-13 09:03:08http://111.42.66.41:52419/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-09 18:04:47http://111.42.66.41:39327/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-06 06:04:37http://111.42.66.41:33131/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-28 06:06:06http://111.42.66.41:49518/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-03 16:08:01http://111.42.66.41:53264/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-01 17:05:04http://111.42.66.41:43687/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-27 11:05:24http://111.42.66.41:36143/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-17 15:03:09http://111.42.66.41:45507/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-13 11:04:55http://111.42.66.41:41010/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-02 16:53:38http://111.42.66.41:57484/Mozi.mOfflineelf Gandylyan1
2019-12-25 18:01:44http://111.42.66.41:50380/Mozi.mOfflineelf Gandylyan1
2019-12-24 17:49:48http://111.42.66.41:35335/Mozi.mOfflineelf Gandylyan1
2019-12-23 07:13:29http://111.42.66.41:57802/Mozi.mOfflineelf Gandylyan1
2019-12-21 23:24:00http://111.42.66.41:50618/Mozi.mOfflineelf Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-05-08 09:04:10bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-23 06:06:53bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-20 09:29:26bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-11 03:07:21bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-13 09:03:08bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-09 18:04:47bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-06 06:04:37bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-28 06:06:06bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-03 16:08:01bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-01 17:05:04bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-27 11:05:24bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-13 11:04:55bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-02 16:53:38bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-25 18:01:44bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-24 17:49:48bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-23 07:13:29bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-21 23:23:56bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf