URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 192.252.181.40
Firstseen:2025-03-30 13:26:03 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-03-30 13:26:05 192.252.181.40SBL655316AS152194 CTGSERVERLIMITED-AS-AP- USyes

Malware URLs


The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-04-11 11:24:23a40e9a76cb15c6f11022cf3e7713790cd9a6a18f25f8447444fcb725fb79c0e1dll Gh0stRAT
2025-04-08 10:26:19661e5bf843cef44e5197b3b0ac5b0f2887b3338ab67566ca13bc7a41184a2f0bdll Gh0stRAT
2025-04-08 08:49:56e05c5387ea74e59dc7347fe7fce47a88f334492e42e9cb48920ff365ee3a74d1dll Gh0stRAT
2025-04-06 15:26:14f721955c9dcda02e9834b1ead3a25ff1a23ad93f05fd3ce0e82fa28d829e2fdbdll Gh0stRAT
2025-04-03 11:00:4444368dd9f1ad234be350c6b0f0d8ad2a7893342126a6fbb87e45e86d354b8622dll 
2025-04-01 07:36:155099e86632fc3d6693f754411a391066166bf68325121b1bbcc3c57baa47808funknown  
2025-03-31 20:36:09dd258c850e41bb8df0238da0e787151effe0fd90562df933981fb54cbee7e8f4exe  
2025-03-31 20:28:17dd258c850e41bb8df0238da0e787151effe0fd90562df933981fb54cbee7e8f4exe  
2025-03-31 20:26:49dd258c850e41bb8df0238da0e787151effe0fd90562df933981fb54cbee7e8f4exe  
2025-03-31 20:23:57dd258c850e41bb8df0238da0e787151effe0fd90562df933981fb54cbee7e8f4exe  
2025-03-31 20:15:390fac608f99f17989856767939b603941e55aeb2515e8b5a3376f95e5a85153d1unknown  
2025-03-30 13:26:590df117613af0902c70b911dfac2ee615177502036b2335490417aee11db9dfeddllGh0stRAT
2025-03-30 13:26:434cf92b27d387c9f3aaee9bc12de4eb22f2e8a6b6179affc4575a5d778cee173bdllGh0stRAT
2025-03-30 13:26:43d71bb15d343dd91690efb049eba30f28aecc17500bd2deb7204f48282e45576edllGh0stRAT
2025-03-30 13:26:420271dce68b059c6996c2af61298a54b5dac89d9b4a76e4849e715ccaf7466dc9dllGh0stRAT
2025-03-30 13:26:42bca02eb1dc8358f4aa362298742eb4cc5ea2723bf9554302dc0a349f5ee67de7dllGh0stRAT
2025-03-30 13:26:410d5fd3da00f55402d3a66a8dd9f005b30d541cf2504073bc61c9ab260dccc4f0dllGh0stRAT
2025-03-30 13:26:23c89968277e678070a4589759b629e5b95324272b2ee5e6890840d2ab9a5ede71dll 
2025-03-30 13:26:14b9f4ae02b566accf672235d476c09ec2840c22a74f07c87acfcd5df98fea011adll YoungLotus
2025-03-30 13:26:1203d1ae6a9d260f2b46bfa69407cdae7c1c55c968893211cbcd5990faa052a01fdll 
2025-03-30 13:26:08db0e177821e1d6563e54dec0f86e5066563115e5e67d415b256032c73b4c739eunknown  
2025-03-30 13:26:05639356a4aa1c52287ef7e0100983e19a4b9cb4c45686ccd2dacb1e0483e0eff8unknown