URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 116.114.95.180
Firstseen:2019-12-24 13:24:39 UTC
Total malware sites :30
Online malware sites :0 (0%)
Offline Malware sites :30 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-24 13:24:40 116.114.95.180Not listedAS4837 CHINA169-Backbone- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-08-17 01:23:58http://116.114.95.180:54945/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-08-17 01:04:08http://116.114.95.180:54945/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2020-08-15 03:04:19http://116.114.95.180:46122/Mozi.mOfflineMozi ext Gandylyan1
2020-08-12 12:18:08http://116.114.95.180:58863/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-08-12 10:58:50http://116.114.95.180:58863/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2020-08-10 15:27:11http://116.114.95.180:42567/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-05-20 03:04:04http://116.114.95.180:52564/Mozi.mOfflineMozi ext Gandylyan1
2020-05-14 06:04:42http://116.114.95.180:56670/Mozi.mOfflineMozi ext Gandylyan1
2020-05-09 15:04:45http://116.114.95.180:56503/Mozi.mOfflineMozi ext Gandylyan1
2020-05-02 18:03:43http://116.114.95.180:60528/Mozi.mOfflineMozi ext Gandylyan1
2020-04-27 12:06:03http://116.114.95.180:56930/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-28 15:04:34http://116.114.95.180:60304/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-25 06:06:47http://116.114.95.180:43488/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-24 00:04:42http://116.114.95.180:35369/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-19 22:34:05http://116.114.95.180:48981/Mozi.mOfflinebashlite elf gafgyt ext zbetcheckin
2020-03-18 18:03:21http://116.114.95.180:56800/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-02 00:03:06http://116.114.95.180:49066/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-29 00:04:47http://116.114.95.180:44849/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-23 00:04:35http://116.114.95.180:37199/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-11 00:04:47http://116.114.95.180:49029/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-05 21:05:50http://116.114.95.180:37641/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-04 02:04:22http://116.114.95.180:35495/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-26 05:05:29http://116.114.95.180:39194/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-14 02:06:47http://116.114.95.180:47310/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-12 22:03:06http://116.114.95.180:60290/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-08 10:04:20http://116.114.95.180:56213/Mozi.mOfflineelf Gandylyan1
2020-01-06 15:04:56http://116.114.95.180:37758/Mozi.mOfflineelf Gandylyan1
2020-01-03 23:53:52http://116.114.95.180:37558/Mozi.mOfflineelf Gandylyan1
2019-12-26 20:47:19http://116.114.95.180:42219/Mozi.mOfflineelf Gandylyan1
2019-12-24 13:24:40http://116.114.95.180:49248/Mozi.mOfflineelf Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-08-17 01:23:58bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-08-17 01:04:08bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-08-15 03:04:19bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-08-12 12:18:08bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-08-12 10:58:50bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-08-10 15:27:11bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-20 03:04:04bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-14 06:04:42bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-09 15:04:45bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-02 18:03:43bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-27 12:06:03bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-28 15:04:34bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-25 06:06:47bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-24 00:04:42bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-19 22:34:05bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-18 18:03:21bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-02 00:03:06bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-29 00:04:47bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-23 00:04:35bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-11 00:04:47bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-05 21:05:50bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-04 02:04:21bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-26 05:05:29bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-14 02:06:47bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-08 10:04:20bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-06 15:04:56bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-03 23:53:52bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-26 20:47:19bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-24 13:24:40bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf