URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 192.252.181.93
Firstseen:2025-06-05 09:24:03 UTC
Total malware sites :27
Online malware sites :0 (0%)
Offline Malware sites :27 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-06-05 09:24:05 192.252.181.93SBL655316AS152194 CTGSERVERLIMITED-AS-AP- USyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-06-12 15:07:33http://192.252.181.93:6635/103.199.100.37.dllOfflineGh0stRAT ua-wget BlinkzSec
2025-06-12 15:07:33http://192.252.181.93:6635/881.dllOfflineGh0stRAT ua-wget BlinkzSec
2025-06-12 15:07:33http://192.252.181.93:6635/Dll1.dllOfflineua-wget ValleyRAT BlinkzSec
2025-06-12 15:07:33http://192.252.181.93:6635/tpsvcBase.dll.datOfflineua-wget BlinkzSec
2025-06-12 15:07:33http://192.252.181.93:6635/StarRailBase.dllOfflineua-wget BlinkzSec
2025-06-12 15:07:33http://192.252.181.93:6635/qqx52_gameBase.dllOfflineua-wget BlinkzSec
2025-06-12 15:07:33http://192.252.181.93:6635/103.199.100.37.datOfflineua-wget BlinkzSec
2025-06-12 15:07:33http://192.252.181.93:6635/880.dllOfflineGh0stRAT ua-wget BlinkzSec
2025-06-05 09:25:44http://192.252.181.93:6635/192.238.176.82.dllOfflineGh0stRAT opendir Riordz
2025-06-05 09:25:44http://192.252.181.93:6635/120.89.71.182.dllOfflineGh0stRAT opendir Riordz
2025-06-05 09:25:43http://192.252.181.93:6635/45.119.98.151.dllOfflineGh0stRAT opendir Riordz
2025-06-05 09:25:42http://192.252.181.93:6635/192.238.178.202.dllOfflineGh0stRAT opendir Riordz
2025-06-05 09:25:40http://192.252.181.93:6635/120.89.71.178.dllOfflineGh0stRAT opendir Riordz
2025-06-05 09:25:39http://192.252.181.93:6635/38.46.13.90.dllOfflineGh0stRAT opendir Riordz
2025-06-05 09:24:32http://192.252.181.93:6635/23.226.57.7.datOfflineopendir Riordz
2025-06-05 09:24:32http://192.252.181.93:6635/206.119.165.155.datOfflineopendir Riordz
2025-06-05 09:24:32http://192.252.181.93:6635/112.213.116.134.datOfflineopendir Riordz
2025-06-05 09:24:32http://192.252.181.93:6635/156.234.0.124.datOfflineopendir Riordz
2025-06-05 09:24:31http://192.252.181.93:6635/45.119.98.151.datOfflineopendir Riordz
2025-06-05 09:24:30http://192.252.181.93:6635/120.89.71.178.datOfflineopendir Riordz
2025-06-05 09:24:19http://192.252.181.93:6635/1.dllOfflineopendir Riordz
2025-06-05 09:24:15http://192.252.181.93:6635/8010.datOfflineopendir Riordz
2025-06-05 09:24:15http://192.252.181.93:6635/134.122.128.161.datOfflineopendir Riordz
2025-06-05 09:24:15http://192.252.181.93:6635/134.122.128.182.datOfflineopendir Riordz
2025-06-05 09:24:10http://192.252.181.93:6635/%E7%9C%8B%E5%9B%BE%E...Offlineopendir Riordz
2025-06-05 09:24:06http://192.252.181.93:6635/38.46.13.90.datOfflineopendir Riordz
2025-06-05 09:24:05http://192.252.181.93:6635/38.46.13.90_86.binOfflineopendir Riordz

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-07-05 16:33:223105a921a48ee724435dd4472010163c4b9efdbc50a7ace4ea1b6f86a576a19bdll Gh0stRAT
2025-06-29 12:16:554d6c61bcbc7773618ff8768b8edfb234c7e8528363ac6c26da89e21b8ff68633dll  
2025-06-24 16:35:44be8e14d35b858022dffd4718c328a86ffbb989463c3efececc280e922f54dba2dll  
2025-06-24 10:23:55e20b8ef13e5e8ca25ad6b05de0886c55be294c832f126b944b72fb1f68557195dll Gh0stRAT
2025-06-23 22:40:194618df3908ca8ddda3f5d14b2089ab572f4414204a947c61201ea230ff7b7857dll  
2025-06-23 21:49:5005eee5744198ac7b40e9227dc11427e99cbebfd912a431a0a739518ae70605d2dll Gh0stRAT
2025-06-23 15:49:33642d2ed7080940ce571b5561ef29a5d8bf006b7e73d1bd281fbf58328d9242acdll Gh0stRAT
2025-06-22 23:11:27626ebf34b85bcff4b11c8df9d17a684e937bfb281f51287a59b5682b06f51271dll  
2025-06-22 16:49:027af5a8b8a19138e978f6423e0c0ac1e71dc16db1803d4c08aec38f869d62d2d6dll  
2025-06-22 10:50:22ee296f1508751024f2e119bc6295f49a84feb6c194c6626be083532544d12e52dll Gh0stRAT
2025-06-21 11:11:42604a9afc40cd7682ba01acc1093794222250aa4035052ca0ea06866e80eb4d24dll Gh0stRAT
2025-06-20 17:46:35e125decb929d19ebf9f653e5426880ee678ed1501ce47728c5f298aa14a661f1dll  
2025-06-20 17:19:1619ebdc7b3ff3c6f58ab8e44ee0bf00dc2c6b2b5eb8306eedf599fc931a3cff36dll Gh0stRAT
2025-06-20 17:15:262c1fb94fce3100f66cd0720da92a537d8fb035c5294a01c3543daa0fa8605ec5dll Gh0stRAT
2025-06-19 23:41:07840e6389f39fb7b852088a8e853752e96b0d4e97d86b36ccf985f5d64587bb5ddll Gh0stRAT
2025-06-18 17:22:43a381766a30275abb55bb9e76e1c8cb7501217cc16c295c36a40025948f8ffa7cdll Gh0stRAT
2025-06-17 17:02:504db8ab7adaf93ff4297bd59ba2eed4b4df25465dd90a10ad255ae373ec7ab077dll  
2025-06-17 11:10:2934b85f680e67cf2d97c9ba63760d34eb6f5c05c88318a3ce2c53d3747f706ebedll  
2025-06-16 11:14:56c59bca5983582f8867af21743d43e4c1363bd90fe70bef5e8faced9fa507ddf5dll  
2025-06-16 10:12:27bf591fcd9b16814a7d3bb5b86fe5836c997e6c8ba545d75680287620d1bd6f59dll Gh0stRAT
2025-06-15 17:19:030d886f43be0b17c6f72a670305c72ced91ca0a047c89a2c24e567ac08de2c88bdll  
2025-06-15 16:54:50b63d4fa9fd22822aaadff9e59da695cefd4ae4477ada5057aad4944c7b158cd2dll Gh0stRAT
2025-06-14 23:54:098414010849025de5574cbf313dda23e3035312842cee0c5de48b90aa3080f421dll Gh0stRAT
2025-06-12 15:14:2950195b653a99323eec68c31860a870586da9448002fbc41fccc69334eba1d91bunknown  
2025-06-12 15:14:20f7150d2ff032a0a1314b1e75575d1958210b5d3eba5d36135579eae2bca5ed7eunknown  
2025-06-12 15:13:52eb689bd8c8fe09a6e4e2e5b41cb3c4538c64bc5ef92938480646d10685db6e67dllGh0stRAT
2025-06-12 15:13:363aaecf48df5818392a439b301790a4a5d2dd497e3127dc15bce40bd9977181dfdllValleyRAT
2025-06-12 15:13:00622a533829e63ba80fd3952f0381caace464a284a61a6da36f14e378a37a9749dll 
2025-06-12 15:12:50cb17e85bbb3da8370ef937836f0f24cae72a54c5f54dc9ed169031f5275a07e2dll 
2025-06-12 15:12:099408a7c93e8115afe26a6a12e8bfce35d741cdc890ee2d08b7dba9eb6bacdde1dllGh0stRAT
2025-06-12 15:11:50f980a395b1d3f5a2a4720e6cd57edaf5819105af9d9bb153e6a854dad0aa5659dllGh0stRAT
2025-06-12 09:50:344b4700c6d9419f0da5648519829211fc16fb0071e8b3d7853450fc0c0f55db00dll  
2025-06-11 15:41:05b918255d40ac798774c3b861ffbf06c25774d5d702cd9b1528d0d647e300fe8ddll Gh0stRAT
2025-06-09 15:35:225b4ba1ecb3e011e7758ec930382340be593405ab05798a3a03e156b5f64fb8b5dll  
2025-06-09 09:25:44f8610f83b26aa03e9a9f53546e4d9ea74c34a58dcf8042d887014a4938f325e5dll Gh0stRAT
2025-06-09 08:53:008ad2972ebc73bba1d94aee04b4e9e056eaeb74155c52cc2327269db681f802cfdll  
2025-06-08 15:06:321eb84311f1412beed0c71722ef197887af87150b8b1573dc0145d6ff8cf2e0a9dll Gh0stRAT
2025-06-08 15:05:44cb516a1de497249c80f33a79ebcbf34c61c01c94fa5041219ea922b5d1837af6dll  
2025-06-08 08:53:25b217f5c25ede1b29d280683480ce9c83df1c8a4df37faa359e965fc2fafe4dc5dll Gh0stRAT
2025-06-07 09:33:5118ec2949c252cba11225b2ef2fc37847253c0bb2d0349a093ac38c6b3f8892b2dll Gh0stRAT
2025-06-07 09:10:456e25e8379efbd2a6ea54fd901e3325cf7d1b0c2596bf0aef274f951679104aa8dll Gh0stRAT
2025-06-06 15:13:234ecb266da15d24719908d9df6515ce31339bdbc0b0fa8186fd66713371029cb3dll Gh0stRAT
2025-06-06 15:12:06035e6b2064453bb68a5a21f610be6147c47d9d490eab448097d2d7df57c00843dll Gh0stRAT
2025-06-06 08:55:386fddee12262f702de7ff59bf6a8178069576ae4ca57eae62d9d3c7cfb3814a53dllGh0stRAT
2025-06-06 08:36:2664805f0091860b0edb7db032889e93a6f64aff4bfa627e5a3bb581dffe1fc23cdll  
2025-06-06 08:34:14bfc8b1bad52d3c5df91d575fb62ace6f161032d7a34a394048ceabf4f6fcc1c1dll Gh0stRAT
2025-06-05 17:18:31e341ad06bffac6637eceabcca1809cb2cb0378a4a02a0deb60c6be8536e97d81dllGh0stRAT
2025-06-05 16:27:31c9fc0c580e2cd2e376e7103422b581255da63295b94a96cd9121afa467a6583adllGh0stRAT
2025-06-05 15:13:32234798f311c19364eb956b7d47bb6b5f89e94055b13cb0b2732bf5376d0d4f00dll 
2025-06-05 14:32:3639de176c5876211820f2a565b740fdbb716cb0c9a27798732a9beeddef32b509dllGh0stRAT
2025-06-05 09:25:44481f80be12bf59f0f7a813410241e9101d68725e7e5e9dd0caede8709c5a75c9dllGh0stRAT
2025-06-05 09:25:44a81700bf767bd7c4ee3ba71c954ad1bc37b89818a8953466bb7d858f8a4d26bddllGh0stRAT
2025-06-05 09:25:43aa9380ebe4adbb984507dacb82fc077026f2ebd0535af216a6569b04ce9d3efedllGh0stRAT
2025-06-05 09:25:42b642e6abf52baf150f8f06464a4f43fe8c86b984a859a20ba096e2dc950e4bf6dllGh0stRAT
2025-06-05 09:25:395e189d616ee4fe528bc165b7528b071619408d43bbfd9c82c045aeeb55276478dllGh0stRAT
2025-06-05 09:25:3968d0d7937388b70590892bd45e375a3986986abba5bfaf6071df495bd5978bc6dllGh0stRAT
2025-06-05 09:24:32045ff27d685539db01595646ad2f08e5e21d941b9240684851ff4765d3e025aeunknown  
2025-06-05 09:24:328b2a44c76e6d8e2b65b6c9620c9d411a1f77ef0cdbd2393b0057477d3b7495e2unknown  
2025-06-05 09:24:32d4e500185ced493403bb09bd130dfa37f3ed114489c8fa8c49c9e3e79b9d8467unknown  
2025-06-05 09:24:327323a55fb8bb834a24a1f2c126bd050076475c8d132fd2392ed9e425459abddaunknown  
2025-06-05 09:24:31df9a0d5486a70c813f13367108c88d158cce4488c90c547fcce52962f1959f1funknown  
2025-06-05 09:24:30d719c8682032184d9fda7ae41aa30b0a595085c11cd9925889415bf884fa4404unknown  
2025-06-05 09:24:193d40e4fbd24a754140e97bf839f3d623d4406fb55da7bcca8bba5f1b70d389c0dll 
2025-06-05 09:24:152808b4afc53e0ece9be62eceb08e153ae226f215bd390a209de83b24cf9ea91cunknown  
2025-06-05 09:24:151be14bde1b0a1c5dc96295bb3e6d133979f8991fdabe470abcb16ca27aee6effunknown  
2025-06-05 09:24:15b95f203a59fd58d1850b51bacd66d902181af7516185b1540e9922812c707c27unknown  
2025-06-05 09:24:1041291c167315e559e9be511caaa7d6c75c336af045cdb81a645f82e8ebec058bunknown  
2025-06-05 09:24:066a5cadbf35260ec89c4324538c09cc9085207b94e60ecb226b98a543205b0c8funknown  
2025-06-05 09:24:0599f5fc0fff6c25a553da9a5fb0a8a44945cebcad100aaba47c469110bc105122unknown