URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 14.138.8.215
Firstseen:2021-01-11 15:33:43 UTC
Total malware sites :26
Online malware sites :0 (0%)
Offline Malware sites :26 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-10-21 17:35:07 14.138.8.215Not listedAS9943 KNCTV-AS- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-08-23 15:57:05http://14.138.8.215:4476/mozi.mOffline tammeto
2021-07-06 04:35:06http://14.138.8.215:2574/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-07-04 21:05:09http://14.138.8.215:2574/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2021-06-27 23:35:10http://14.138.8.215:2429/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-06-23 20:51:22http://14.138.8.215:3267/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-06-20 00:02:05http://14.138.8.215:3267/iOffline32-bit elf mips Mozi ext geenensp
2021-05-26 01:50:12http://14.138.8.215:3068/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-05-13 16:46:16http://14.138.8.215:3185/iOffline32-bit elf mips Mozi ext geenensp
2021-05-12 10:07:20http://14.138.8.215:3185/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-04-28 23:05:20http://14.138.8.215:3190/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-04-16 08:22:05http://14.138.8.215:3321/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-04-08 17:40:05http://14.138.8.215:3321/iOffline32-bit elf mips Mozi ext geenensp
2021-04-08 17:13:05http://14.138.8.215:3321/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-03-24 01:39:07http://14.138.8.215:4409/iOffline32-bit elf mips geenensp
2021-03-21 22:19:07http://14.138.8.215:4409/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-02-14 09:49:05http://14.138.8.215:4706/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-02-08 18:49:04http://14.138.8.215:3601/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-01-06 00:39:06http://14.138.8.215:3523/iOffline32-bit elf mips geenensp
2021-01-06 00:11:06http://14.138.8.215:3523/bin.shOffline32-bit elf mips geenensp
2020-12-17 06:05:07http://14.138.8.215:4979/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-12-16 13:52:06http://14.138.8.215:4979/iOffline32-bit elf mips geenensp
2020-12-16 13:31:07http://14.138.8.215:4979/bin.shOffline32-bit elf mips geenensp
2020-11-29 11:05:07http://14.138.8.215:2318/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-11-10 02:19:06http://14.138.8.215:2693/iOffline32-bit elf mips geenensp
2020-11-08 07:17:06http://14.138.8.215:2693/bin.shOffline32-bit elf mips geenensp
2020-10-21 17:35:07http://14.138.8.215:2693/Mozi.mOfflineelf Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-08-23 15:57:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-07-06 04:35:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-07-04 21:05:09f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-06-27 23:35:10f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-06-23 20:51:22f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-06-20 00:02:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-05-26 01:50:12f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-05-13 16:46:15f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-05-12 10:07:20f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-28 23:05:20f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-16 08:22:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-08 17:40:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-08 17:13:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-03-24 01:39:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-03-21 22:19:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-02-14 09:49:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-02-08 18:49:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-01-06 00:39:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-01-06 00:11:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-12-17 06:05:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-12-16 13:52:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-12-16 13:31:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-29 11:05:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-10 02:19:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-08 07:17:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-10-21 17:35:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf