🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 173.245.130.80
Firstseen:2021-08-30 16:36:03 UTC
Total malware sites :13
Online malware sites :0 (0%)
Offline Malware sites :13 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2021-08-30 16:36:13 173.245.130.80173.245.130-80.wwt.netNot listedAS19420 WWTC-247-01- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2021-10-13 22:05:04http://173.245.130.80:34073/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-10-11 11:06:04http://173.245.130.80:45191/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-10-07 03:31:04http://173.245.130.80:44053/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-10-02 23:26:04http://173.245.130.80:41922/iOffline32-bit elf mips Mozi ext geenensp
2021-10-02 22:57:09http://173.245.130.80:41922/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-09-28 00:23:18http://173.245.130.80:41683/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-09-26 16:22:05http://173.245.130.80:33951/iOffline32-bit elf mips Mozi ext geenensp
2021-09-26 04:34:03http://173.245.130.80:33951/bin.shOffline32-bit elf mips Mozi ext geenensp
2021-09-21 23:39:03http://173.245.130.80:58090/mozi.mOffline tammeto
2021-09-19 20:19:03http://173.245.130.80:44053/iOffline32-bit elf mips Mozi ext geenensp
2021-09-17 06:05:10http://173.245.130.80:44053/Mozi.mOfflineelf Mozi ext lrz_urlhaus
2021-09-09 04:11:04http://173.245.130.80:52913/mozi.mOffline tammeto
2021-08-30 16:36:13http://173.245.130.80:35411/Mozi.mOfflineelf Mozi ext lrz_urlhaus

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2021-10-13 22:05:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-10-11 11:06:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-10-07 03:31:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-10-02 23:26:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-10-02 22:57:09f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-28 00:23:18f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-26 16:22:05f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-26 04:34:03f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-21 23:39:03f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-19 20:19:03f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-17 06:05:10f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-09 04:11:04f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf 
2021-09-02 19:45:204216b9806344443a872f7eef5e476441114cee56f38feb1799c0a0e356e1f7c9elf  
2021-09-01 08:56:4917138c7aa8e4d6a38b39317914b46b8d553ca6fb0d0ac636ed14b48589029226elf  
2021-09-01 08:41:43387b896256ed320dd493bd1f02edf09611396d49cde851a10806e554fe3ab3cfelf  
2021-09-01 03:59:46ae9c7676a6948fa19120fa052e6ae96d2962a593ac0e4358093055d040446113elf  
2021-08-31 21:37:43764079e50c35ec66fb1c00e773027d781c65351b9105acf918706fe9dc8a2d6eelf  
2021-08-31 15:45:46adb0aa33e0a5bec80b7587ff7edf7ad8eb5c1b127da85bf34c1484e5e7bc0be1elf  
2021-08-31 15:23:34b3514df4c19b927a985e34a79e567e2835f4992feb7d9c1d3526e33903791130elf  
2021-08-31 10:28:1967233d8656957bf3113971acaf86e27387eb12673fc4366e7ed88d57ecf9562delf  
2021-08-30 19:42:400d6ae5e6717c6ed59cd938933fea13e34e31df1c8924a9e4b44be89df5aefd55elf  
2021-08-30 19:05:32ff08dad9e80cc52495dc5a4c81f365a600c7f66cd79534b801e5bc6d2a4b2995elf  
2021-08-30 16:36:12f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8elf