URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host: 196.251.107.186
Firstseen:2026-07-04 06:38:04 UTC
Total malware sites :6
Online malware sites :2 (33%)
Offline Malware sites :4 (67%)
Newest active malware site :2026-07-04 06:38:12 UTC
Oldest active malware site :2026-07-04 06:38:10 UTC (Age: 14 days, 8 hours, 17 minutes)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-07-04 06:38:06 196.251.107.186SBL678968AS214351 FEMOIT- DEyes

Malware URLs

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-07-04 06:38:12http://196.251.107.186/bot_x64.exeOnlineRemusStealer abus3reports
2026-07-04 06:38:11http://196.251.107.186/uploads/522028f3854b99ef...Offline abus3reports
2026-07-04 06:38:10http://196.251.107.186/uploads/7ea7ffe564b654a0...Online abus3reports
2026-07-04 06:38:09http://196.251.107.186/uploads/f63a4fafa644638b...Offline abus3reports
2026-07-04 06:38:09http://196.251.107.186/uploads/9fe73e83c7b381e1...Offline abus3reports
2026-07-04 06:38:06http://196.251.107.186/uploads/f46571d254e4b94f...Offline abus3reports

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2026-07-04 06:38:12094c4eb7f5480fb893aa6bb24d40b1b36534c0c85ea5e3f8c485146c45328ad6exeRemusStealer
2026-07-04 06:38:1028484ae186b36505be08ca8d04e35b3662a63ffe9e74a929e62711ecdde5b95aunknown