URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 185.156.72.8
Firstseen:2025-05-15 14:00:04 UTC
Total malware sites :19
Online malware sites :0 (0%)
Offline Malware sites :19 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-05-15 14:00:08 185.156.72.8Not listedAS215540 GCS-AS- FRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-09 15:08:19http://185.156.72.8/6.exeOfflinetinynuke ext abuse_ch
2025-06-08 07:17:33http://185.156.72.8/rob75u9v/Plugins/cred.dllOfflineAmadey c2hunter
2025-06-08 07:17:09http://185.156.72.8/rob75u9v/Plugins/cred64.dllOfflineAmadey c2hunter
2025-06-08 07:17:04http://185.156.72.8/rob75u9v/Plugins/clip.dllOfflineAmadey c2hunter
2025-06-05 09:28:32http://185.156.72.8/ffdf.exeOfflineexe Riordz
2025-06-04 12:45:05http://185.156.72.8/clp.exeOffline abuse_ch
2025-06-04 12:44:05http://185.156.72.8/rob75u9v/Plugins/clip64.dllOfflineAmadey abuse_ch
2025-06-03 06:06:05http://185.156.72.8/tydd.exeOfflineexe abuse_ch
2025-05-30 06:52:16http://185.156.72.8/5.exeOfflineexe Gh0stRAT abuse_ch
2025-05-26 00:09:11http://185.156.72.8/3.exeOfflinec2-monitor-auto dropped-by-amadey Gh0stRAT c2hunter
2025-05-26 00:09:07http://185.156.72.8/4.exeOfflinec2-monitor-auto dropped-by-amadey c2hunter
2025-05-26 00:09:06http://185.156.72.8/1.exeOfflinec2-monitor-auto dropped-by-amadey c2hunter
2025-05-26 00:09:04http://185.156.72.8/2.exeOfflinec2-monitor-auto dropped-by-amadey c2hunter
2025-05-25 10:09:05http://185.156.72.8/kx.exeOfflinec2-monitor-auto dropped-by-amadey c2hunter
2025-05-22 18:18:17http://185.156.72.8/cx.exeOfflinedropped-by-amadey c2hunter
2025-05-22 18:18:08http://185.156.72.8/px.exeOfflinedropped-by-amadey c2hunter
2025-05-15 14:00:11http://185.156.72.8/zx.exeOfflineexe abuse_ch
2025-05-15 14:00:08http://185.156.72.8/bv.exeOfflineexe abuse_ch
2025-05-15 14:00:08http://185.156.72.8/hx.exeOfflineexe abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-06-26 10:24:498f4a8ab0543c2897b50fed3345b850e6aa309671053bfab327b532c63322e811exe  
2025-06-18 17:02:3664d07657ad5aabe58ebf4a08202f5395562b805d370898d50eee43d334167b84exeDiamotrixClipper
2025-06-15 08:26:156385646bb32f4f9493b167eed457c930d65a66a6ea1b148fa8dc4492df5523d2exe TinyNuke
2025-06-13 18:03:12f88c1e227e3a959aa8609eae1a6ec68ba088ad9b261b99f6b91fa6deb796dd15exe  
2025-06-13 17:38:27f88c1e227e3a959aa8609eae1a6ec68ba088ad9b261b99f6b91fa6deb796dd15exe  
2025-06-12 03:58:53cd24f42e75ec240244754aba2b3c33c36622b2542ba69b5bcc0b26a40f205101exe SVCStealer
2025-06-09 15:08:19e555f5c903329bf84388b3cc9ec813995249cb329aba1b3f431a807949f2e741exe TinyNuke
2025-06-08 09:12:252c05a37ea51abd0c723b80fbcbb9963ce1d1a6a118e73d909dcac932a3568746dll Amadey
2025-06-08 07:17:099fc2322a1e60bd6a11174a899ca306a703556f999c06c3185fbc1fb2aa0d329bdll Amadey
2025-06-08 07:17:04cdd864c3c225c3d95f0b5ef2ad7993781cf5216b9777cf6f5366f4266189e1abdllAmadey
2025-06-08 03:27:542edfe771735c379c0c044fe022866947f03ab2afed7f3b83b4bf0cd4b9625ad9exe  
2025-06-08 03:04:475abfabe996507cb7d863a9bb8e3573dc89ca5d0db276dfa4f26fed4f12236653exe  
2025-06-07 02:58:30abdf615b725ee1bbc34c26d7561979b04f1f1253b03feee5fb4f654f8c559a13exe  
2025-06-07 02:43:02699f54d888a0c7a0ea3d2715a7bb582bcc64cf7db56c6d26edb8e732fcbecf7aexe Gh0stRAT
2025-06-06 21:19:022edfe771735c379c0c044fe022866947f03ab2afed7f3b83b4bf0cd4b9625ad9exe  
2025-06-06 20:48:52daf08d9ea4694260cf7874a9119f015ede908f84f50cb236160cf0e20413eaf6exe SVCStealer
2025-06-06 20:46:525abfabe996507cb7d863a9bb8e3573dc89ca5d0db276dfa4f26fed4f12236653exe  
2025-06-05 14:51:02caa2c47d86656ff7b0be86934eb0b10b7a271862135e4b6cd976197982561100exe  
2025-06-04 20:40:0178b893630dfd623f51c28b61ebea8559cc5a847b8bdf5530ebedf327bc86eb7dexe 
2025-06-04 12:45:0545f894dda51d84c3af4c7b27b9207cead8845b928f30d16e630d4c6883b56aefexe 
2025-06-04 12:44:05cdd864c3c225c3d95f0b5ef2ad7993781cf5216b9777cf6f5366f4266189e1abdllAmadey
2025-06-03 06:06:05a1bf661beb4d7e2065c5994ca1120b41475418558f3dc02037af432e0801b65fexe 
2025-06-03 00:54:419f1abba3092ac72a0fea17ba6d63af78dc1e632dca7ce126273d7efb556ec014exe SVCStealer
2025-06-03 00:36:5545f894dda51d84c3af4c7b27b9207cead8845b928f30d16e630d4c6883b56aefexe 
2025-05-30 06:52:167135da890aef09e3f56291cb944e8e8fd341937649cf437ddb988447d4033cc4exe 
2025-05-29 00:49:43c8913dafd7358b2d266c485d26f80835380468e00316f015dbe54c42eb812d74exe 
2025-05-29 00:48:321cbed022238c36698389ef25a9e8b54abfc21cd0041f29e8960d9af0ba70daf4exeSVCStealer
2025-05-29 00:20:20d6b7c87e6caec7f88bb2cb14a8488a5989260ca2b27f14a91ee56695ed453abfexe 
2025-05-27 03:45:17d325b330fe005578a64d1e593917e9d757ce4614d0d75d26545b5ebd8f626d02exe 
2025-05-26 18:18:51d11dbedd31e4160759479636d6f0ed10bd9be3f76cf3c004b34151fea1fda9a6exe  
2025-05-26 00:09:1184d8ac8e76397cb0ad4285d1bb189e901212632ab3d5f777eb8fd468ec74c480exeGh0stRAT
2025-05-26 00:09:076fac8becbf95d221ccc9c68c846c3b847e89dcf131a1ef11efbd646583f59f4cexeSVCStealer
2025-05-26 00:09:065b9d368a0a91ebed24e3acabffa639916f4661474156c2dd298d8ea7dda81110exe 
2025-05-26 00:09:04c8913dafd7358b2d266c485d26f80835380468e00316f015dbe54c42eb812d74exe 
2025-05-25 10:09:0551a52f9db58137af30e108e66074fa5174957cb3a30e0172d939f1e35854bb39exe 
2025-05-24 13:56:38c8913dafd7358b2d266c485d26f80835380468e00316f015dbe54c42eb812d74exe 
2025-05-24 13:32:327b12adc0db43c4aa337c0898effa34a9dfd653d29bc8ae191d48effd1890c9b3exe 
2025-05-22 18:18:17789bec99500eb4b2c3ce10d651f9bc46acc89bac5636c731dc0414ce36e391c4exe 
2025-05-22 18:18:0839fed46766a6d3eed48825424a2f769e8cf746d7712fa37eaef809ee9bd3ba28exe 
2025-05-16 12:05:370171a1264d70ae0a7aff31bc92682837ad9789359f5c868467e1c2190d8c05e3exe  
2025-05-16 11:56:31e9ec6db1abdd21d4c16954d7b10a4a0a3b9676a60137ea48cf85914b88d3564dexe 
2025-05-15 14:00:10ded9ff2c8ba0bf3a8fb85f871dc00623868f3333305a32b29a3052821234485bexe 
2025-05-15 14:00:08170db7f1f5c713e16927b4e40485e25fa082340c0dcf920237d80819463b0f13exe 
2025-05-15 14:00:075ec2637cd248d908b60a2b89783715043eb377fad0bb15ba5a6a367b275df42eexe