URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 179.1.196.137
Firstseen:2025-07-16 09:40:05 UTC
Total malware sites :11
Online malware sites :0 (0%)
Offline Malware sites :11 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-07-16 09:40:07 179.1.196.137Not listedAS18678 INTERNEXA_S.A._E.S.P- COyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-11-18 21:01:06http://179.1.196.137/iOfflineMozi ext threatquery
2025-11-17 09:09:07http://179.1.196.137:8787/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-11-16 20:25:09http://179.1.196.137:8787/iOffline32-bit elf mips Mozi ext geenensp
2025-09-17 00:16:21http://179.1.196.137:10175/iOffline32-bit elf mips Mozi ext geenensp
2025-09-16 23:27:20http://179.1.196.137:10175/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-08-09 16:08:07http://179.1.196.137:6929/iOffline32-bit elf mips Mozi ext geenensp
2025-08-09 15:40:12http://179.1.196.137:6929/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-07-31 14:52:11http://179.1.196.137:7173/iOffline32-bit elf mips Mozi ext geenensp
2025-07-31 14:27:27http://179.1.196.137:7173/bin.shOffline32-bit elf mips Mozi ext geenensp
2025-07-16 09:58:06http://179.1.196.137:6996/iOffline32-bit elf mips Mozi ext geenensp
2025-07-16 09:40:07http://179.1.196.137:6996/bin.shOffline32-bit elf mips Mozi ext geenensp