URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 111.50.70.34
Firstseen:2024-09-26 02:29:04 UTC
Total malware sites :21
Online malware sites :0 (0%)
Offline Malware sites :21 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2024-09-26 02:29:08 111.50.70.34Not listedAS9808 CHINAMOBILE-CN- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-03-29 06:27:08http://111.50.70.34:48986/iOffline GAYINT_DOT_ORG
2026-03-29 06:27:08http://111.50.70.34:48986/bin.shOffline GAYINT_DOT_ORG
2026-03-22 09:17:24http://111.50.70.34:60809/iOffline32-bit elf mips Mozi ext geenensp
2026-03-22 08:58:35http://111.50.70.34:60809/bin.shOffline32-bit elf mips Mozi ext geenensp
2026-03-21 10:31:17http://111.50.70.34:52892/iOffline32-bit elf mips Mozi ext geenensp
2026-03-21 10:24:21http://111.50.70.34:52892/bin.shOffline32-bit elf mips Mozi ext geenensp
2026-02-13 04:49:08http://111.50.70.34:43158/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-07-10 04:21:17http://111.50.70.34:36438/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-04-27 05:29:06http://111.50.70.34:57512/iOffline32-bit elf mips Mozi ext geenensp
2025-04-27 05:10:06http://111.50.70.34:57512/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-03-26 17:53:05http://111.50.70.34:57418/iOffline32-bit elf mips Mozi ext geenensp
2025-03-26 17:29:07http://111.50.70.34:57418/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-03-11 06:16:04http://111.50.70.34:33992/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-03-07 13:33:07http://111.50.70.34:46444/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-02-20 00:57:05http://111.50.70.34:45436/iOffline32-bit elf mips Mozi ext geenensp
2025-02-20 00:36:05http://111.50.70.34:45436/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-11-08 20:00:10http://111.50.70.34:36240/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-10-31 22:36:08http://111.50.70.34:34005/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-10-25 22:32:07http://111.50.70.34:60683/bin.shOffline32-bit elf mips Mozi ext geenensp
2024-09-26 02:46:05http://111.50.70.34:33363/iOffline32-bit elf mips Mozi ext geenensp
2024-09-26 02:29:08http://111.50.70.34:33363/bin.shOffline32-bit elf mips Mozi ext geenensp

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-03-29 06:27:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2026-03-29 06:27:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2026-03-22 09:17:24f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2026-03-22 08:58:35f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2026-03-21 10:31:17f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2026-03-21 10:24:21f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2026-02-13 04:49:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-07-10 04:21:12f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-04-27 05:29:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-04-27 05:10:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-03-26 17:53:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-03-26 17:29:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-03-11 06:16:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-03-07 13:33:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-02-20 00:57:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2025-02-20 00:36:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-11-08 20:00:10f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-10-31 22:36:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-10-25 22:32:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-09-26 02:46:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2024-09-26 02:29:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf