URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 193.233.164.21 |
|---|---|
| Firstseen: | 2025-10-13 18:18:05 UTC |
| Total malware sites : | 7 |
| Online malware sites : | 0 (0%) |
| Offline Malware sites : | 7 (100%) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2025-10-13 18:18:06 | 193.233.164.21 | Not listed | AS215590 XORA-AS |  RU | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-10-13 18:18:17 | http://193.233.164.21/dns4up.exe | Offline | huntio opendir QuasarRAT  |  BlinkzSec |
| 2025-10-13 18:18:11 | http://193.233.164.21/PulV2.exe | Offline | huntio opendir QuasarRAT | BlinkzSec |
| 2025-10-13 18:18:10 | http://193.233.164.21/SysPul.exe | Offline | huntio opendir QuasarRAT | BlinkzSec |
| 2025-10-13 18:18:08 | http://193.233.164.21/app.vbs | Offline | huntio opendir QuasarRAT | BlinkzSec |
| 2025-10-13 18:18:07 | http://193.233.164.21/update.png | Offline | huntio opendir | BlinkzSec |
| 2025-10-13 18:18:07 | http://193.233.164.21/SysV2.exe | Offline | AsyncRAT huntio opendir xworm | BlinkzSec |
| 2025-10-13 18:18:06 | http://193.233.164.21/Sys32.vbs | Offline | huntio opendir | BlinkzSec |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2025-10-22 04:40:57 | 1fd33da13bbd5d955edef2eb7aeeec948052a0f5446acde748c669e6cf10d7fc | txt | QuasarRAT | |
| 2025-10-18 18:03:43 | 8ccea06cdc1f3cdcfdd0a9fa2b01316d7d42422b84bfa5422feab22a87feb477 | exe | XWorm | |
| 2025-10-13 18:18:17 | 4ea9a321958b4d2c43cadbb62e2b037b958ed5f9984033aa3a9d10a5423fd006 | exe | QuasarRAT | |
| 2025-10-13 18:18:11 | 6167ced165bdcc193cd9cb0898ef6c41fd50918fa2f1183aab82e478800c901a | exe | QuasarRAT | |
| 2025-10-13 18:18:10 | 62875fbcbbd446d7e2ed49860ddc76c8e6ac2c9ee91491e21788fdcc768d581d | exe | QuasarRAT | |
| 2025-10-13 18:18:08 | bf3b17a68cb437d8cf16bea481796dbdfbc82053056c47e25e841a06e2fd4ea6 | txt | QuasarRAT | |
| 2025-10-13 18:18:07 | 153a6d225dffd61913f37ac68d19eb61c1c35374f03b9f94faf28a9bb16ede4b | txt | ||
| 2025-10-13 18:18:07 | dd000e90853f1a78b47e080439588eead0e4cf7c1bb274cd20af626160df1249 | exe | AsyncRAT |