URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 61.18.224.117
Firstseen:2020-12-11 00:03:07 UTC
Total malware sites :7
Online malware sites :0 (0%)
Offline Malware sites :7 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2020-12-11 00:03:12 61.18.224.117cm61-18-224-117.hkcable.com.hkNot listedAS9908 HKCABLE2-HK-AP- HKyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2020-12-21 13:52:04http://61.18.224.117:43799/iOffline32-bit elf mips geenensp
2020-12-21 13:51:04http://61.18.224.117:43799/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-12-21 13:14:07http://61.18.224.117:43799/bin.shOffline32-bit elf mips geenensp
2020-12-19 07:50:05http://61.18.224.117:37990/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-12-18 00:50:06http://61.18.224.117:40968/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-12-14 14:51:05http://61.18.224.117:35907/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2020-12-11 00:03:12http://61.18.224.117:40445/Mozi.mOfflineMozi ext Gandylyan1