URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 116.114.95.218
Firstseen:2019-12-19 21:13:12 UTC
Total malware sites :25
Online malware sites :0 (0%)
Offline Malware sites :25 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2019-12-19 21:13:14 116.114.95.218Not listedAS4837 CHINA169-Backbone- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-08-03 09:04:04http://116.114.95.218:35652/Mozi.mOfflineMozi ext Gandylyan1
2020-07-27 18:05:40http://116.114.95.218:59646/Mozi.mOfflineMozi ext Gandylyan1
2020-07-06 21:04:44http://116.114.95.218:50474/Mozi.mOfflineMozi ext Gandylyan1
2020-07-03 15:03:28http://116.114.95.218:39391/Mozi.mOfflineMozi ext Gandylyan1
2020-06-26 03:03:22http://116.114.95.218:34487/Mozi.mOfflineMozi ext Gandylyan1
2020-06-09 15:03:17http://116.114.95.218:51410/Mozi.mOfflineMozi ext Gandylyan1
2020-05-30 01:41:06http://116.114.95.218:40418/Mozi.mOfflinebashlite elf gafgyt ext zbetcheckin
2020-04-26 15:04:34http://116.114.95.218:40982/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-23 09:54:04http://116.114.95.218:55292/Mozi.m+-O+/tmp/netg...Offlinebashlite elf gafgyt ext zbetcheckin
2020-04-21 21:05:32http://116.114.95.218:55292/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-19 09:05:40http://116.114.95.218:60543/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-04-08 03:06:56http://116.114.95.218:39102/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-03-09 12:05:18http://116.114.95.218:43171/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-19 06:04:07http://116.114.95.218:56221/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-14 06:05:19http://116.114.95.218:40648/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-06 05:23:06http://116.114.95.218:52584Offlinebashlite elf gafgyt ext zbetcheckin
2020-02-05 18:04:18http://116.114.95.218:52584/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-02-02 08:06:01http://116.114.95.218:60426/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-31 05:05:14http://116.114.95.218:42597/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-21 20:05:08http://116.114.95.218:60989/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-19 20:04:08http://116.114.95.218:40567/Mozi.mOfflineelf Mozi ext Gandylyan1
2020-01-14 06:03:26http://116.114.95.218:50793/Mozi.mOfflineelf Mozi ext Gandylyan1
2019-12-28 12:19:31http://116.114.95.218:48286/Mozi.mOfflineelf Gandylyan1
2019-12-23 07:04:01http://116.114.95.218:46600/Mozi.mOfflineelf Gandylyan1
2019-12-19 21:13:14http://116.114.95.218:56174/Mozi.mOfflineelf Gandylyan1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2020-08-03 09:04:04bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-07-27 18:05:40bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-07-06 21:04:44bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-07-03 15:03:28bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-06-26 03:03:22bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-06-09 15:03:17bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-05-30 01:41:06bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-26 15:04:34bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-23 09:54:04bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-21 21:05:31bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-19 09:38:07bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-04-08 03:06:56bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-03-09 12:05:18bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-19 06:04:07bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-14 06:05:19bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-06 05:23:06bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-05 18:04:18bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-02-02 08:06:01bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-31 05:05:14bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-21 20:05:08bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-19 20:04:08bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2020-01-14 06:03:26bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-28 12:19:31bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-23 07:04:01bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf 
2019-12-19 21:13:14bba18438991935a5fb91c8f315d08792c2326b2ce19f2be117f7dab984c47bdfelf