URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 18.236.12.51
Firstseen:2026-08-19 06:18:05 UTC
Total malware sites :12
Online malware sites :0 (0%)
Offline Malware sites :12 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-08-19 06:18:21 18.236.12.51ec2-18-236-12-51.us-west-2.compute.amazonaws.comNot listedAS16509 AMAZON-02- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-08-19 07:20:22http://18.236.12.51/bins/chud.m68kOfflineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.arm6Offlineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.arm7Offlineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.x86_64Offlineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.ppcOfflineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.arcOfflineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.arm5Offlineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.sh4Offlineua-wget abuse_ch
2026-08-19 07:20:22http://18.236.12.51/bins/chud.mpslOfflineua-wget abuse_ch
2026-08-19 07:20:21http://18.236.12.51/bins/chud.armOfflineua-wget abuse_ch
2026-08-19 06:18:21http://18.236.12.51/bins/chud.x86Offlinewraith c2hunter
2026-08-19 06:18:21http://18.236.12.51/bins/chud.mipsOfflinewraith c2hunter

The table below shows recent payloads delivery by this host.