URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 58.142.144.134
Firstseen:2020-10-14 07:09:02 UTC
Total malware sites :19
Online malware sites :0 (0%)
Offline Malware sites :19 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-10-14 07:09:05 58.142.144.134Not listedAS10036 CNM-AS-KR- KRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-12-13 08:54:06http://58.142.144.134:2891/mozi.mOffline tammeto
2021-12-06 20:02:07http://58.142.144.134:2891/iOffline32-bit elf mips Mozi ext geenensp
2021-12-06 19:35:13http://58.142.144.134:2891/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-04-18 23:21:05http://58.142.144.134:4944/iOffline32-bit elf mips Mozi ext geenensp
2021-04-18 22:49:11http://58.142.144.134:4944/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-04-17 15:11:07http://58.142.144.134:4944/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-01-13 07:51:05http://58.142.144.134:3594/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-12-20 05:11:05http://58.142.144.134:4841/iOffline32-bit elf mips geenensp
2020-12-20 04:43:05http://58.142.144.134:4841/bin.shOffline32-bit elf mips geenensp
2020-12-18 01:50:06http://58.142.144.134:4841/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-12-10 21:21:05http://58.142.144.134:4737/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-11-28 22:36:07http://58.142.144.134:4706/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-11-20 10:52:05http://58.142.144.134:4461/Mozi.aOfflineelf Mozi ext lrz_urlhaus
2020-11-15 03:25:06http://58.142.144.134:4461/iOffline32-bit elf mips geenensp
2020-11-15 02:02:06http://58.142.144.134:4461/bin.shOffline32-bit elf mips geenensp
2020-11-12 21:20:06http://58.142.144.134:4461/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-10-20 16:20:07http://58.142.144.134:3838/iOffline32-bit elf mips geenensp
2020-10-20 16:07:05http://58.142.144.134:3838/bin.shOffline32-bit elf mips geenensp
2020-10-14 07:09:05http://58.142.144.134:3838/Mozi.mOfflineelf Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-12-13 08:54:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-12-06 20:02:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-12-06 19:35:13f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-18 23:21:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-18 22:49:11f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-04-17 15:11:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-01-13 07:51:05798725bcb7292e8b41279521dde20eea17c119e8a37c39dea098091a210f611celf  
2020-12-20 05:11:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-12-20 04:43:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-12-18 01:50:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-12-10 21:21:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-28 22:36:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-20 10:52:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-15 03:25:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-15 02:02:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-12 21:20:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-10-20 16:20:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-10-20 16:07:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-10-14 07:09:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf