URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 58.56.140.242
Firstseen:2020-11-14 04:36:03 UTC
Total malware sites :22
Online malware sites :0 (0%)
Offline Malware sites :22 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-11-14 04:36:05 58.56.140.242Not listedAS4134 CHINANET-BACKBONE- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2022-08-28 06:38:05http://58.56.140.242:42292/iOffline32-bit elf mips Mozi ext geenensp
2022-04-24 15:06:08http://58.56.140.242:28196/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2022-04-23 07:05:06http://58.56.140.242:53577/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2022-02-16 08:54:04http://58.56.140.242:21733/mozi.mOffline tammeto
2022-02-13 10:34:05http://58.56.140.242:21733/iOffline32-bit elf mips Mozi ext geenensp
2022-02-13 10:06:05http://58.56.140.242:21733/bin.shOffline32-bit elf mips Mozi ext geenensp
2022-01-27 08:02:07http://58.56.140.242:50664/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2022-01-23 22:14:04http://58.56.140.242:11069/iOffline32-bit elf mips Mozi ext geenensp
2021-12-07 12:37:09http://58.56.140.242:16916/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-11-30 01:30:06http://58.56.140.242:2320/iOffline32-bit elf mips Mozi ext geenensp
2021-11-30 01:21:05http://58.56.140.242:2320/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-10-28 19:07:04http://58.56.140.242:34444/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-10-26 18:27:07http://58.56.140.242:34444/Mozi.aOfflineMozi ext Petras_Simeon
2021-09-22 12:04:17http://58.56.140.242:27099/Mozi.mOfflineMozi ext Gandylyan1
2021-07-12 05:36:10http://58.56.140.242:65175/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-07-07 21:38:18http://58.56.140.242:36080/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-06-16 09:24:08http://58.56.140.242:18477/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-05-11 16:09:08http://58.56.140.242:57177/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-05-07 10:10:09http://58.56.140.242:53332/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-04-01 15:04:17http://58.56.140.242:11522/Mozi.mOfflineMozi ext Gandylyan1
2020-11-27 22:36:05http://58.56.140.242:61710/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-11-14 04:36:05http://58.56.140.242:10477/Mozi.mOfflineelf Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2022-08-28 06:38:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2022-04-24 15:06:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2022-04-23 07:05:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2022-02-16 08:54:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2022-02-13 10:34:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2022-02-13 10:06:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2022-01-27 08:02:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2022-01-23 22:14:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-12-07 12:37:09f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-11-30 01:30:06f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-11-30 01:21:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-10-28 19:07:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-10-26 18:27:07f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-07-12 05:36:10f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-07-07 21:38:18f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-06-16 09:24:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-05-11 16:09:08f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-05-07 10:10:09f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-27 22:36:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2020-11-14 04:36:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf