URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 113.45.253.80
Firstseen:2025-04-17 17:07:03 UTC
Total malware sites :1

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-04-17 17:07:10 113.45.253.80ecs-113-45-253-80.compute.hwclouds-dns.comNot listedAS55990 HWCSNET- CNyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-04-17 17:07:10https://113.45.253.80/02.08.2022.exeOfflinecensys CobaltStrike ext shellcode NDA0E

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-05-25 06:44:2616262c3c5c6324bb765ac6f0963e5022d3f4d38ef69c85e7788faafd33725feeunknown  
2026-04-20 06:24:254bff92e2a76449433279a0f1ae8fa5248549ac9b63be8e17f97d6624ee466db8unknown  
2026-04-08 10:24:538171c7f377f6e129ba678f46bf3f903c5f64ff580d9ad47c0a73a03028d5bc4bunknown  
2026-04-02 04:14:36a3d6674d30fb27e5f8cd57b5156d53a136ec2750caba61990bdffbdb6982c3dbunknown  
2025-05-01 05:16:08fd8ca31107656dc13fd413be0c0046a44ae2cf8dae5c6ef4e8ace5adf328cbf6unknown  
2025-04-28 11:35:452369a6fcd300eb2c44c9d6cec2ccb748cb96d9c9477defad3f019355145d6a8eunknown  
2025-04-18 03:53:36f693d5d6cc86ac507306ea1c81440dbbbef7ab9dfbc93ec2846bc32b800acb8bunknown  
2025-04-18 02:16:071962e7a7014a07928989e91f0e8892827c8f6ebbad5e915eae70f02d3b1710b5unknown  
2025-04-17 17:07:108019d95a7b2d8b1476ee47ac0ec03dc0c0ce348d34d8dbec4623a6bda434ea92unknown