URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 196.251.116.246
Firstseen:2025-10-05 06:24:05 UTC
Total malware sites :17
Online malware sites :0 (0%)
Offline Malware sites :17 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-10-06 19:01:25http://196.251.116.246/1.shOfflinemirai ext opendir DaveLikesMalwre
2025-10-06 19:01:14http://196.251.116.246/renji/debugOfflinemirai ext opendir DaveLikesMalwre
2025-10-05 06:27:25http://196.251.116.246/renji/renji.x86_64Offlineelf mirai ext ua-wget abuse_ch
2025-10-05 06:26:10http://196.251.116.246/renji/renji.arm5Offlineelf mirai ext ua-wget abuse_ch
2025-10-05 06:26:10http://196.251.116.246/renji/renji.spcOfflineelf mirai ext ua-wget abuse_ch
2025-10-05 06:26:10http://196.251.116.246/renji/renji.m68kOfflineelf mirai ext ua-wget abuse_ch
2025-10-05 06:25:19http://196.251.116.246/renji/renji.ppcOfflineelf mirai ext ua-wget abuse_ch
2025-10-05 06:25:19http://196.251.116.246/renji/renji.i686Offlineelf mirai ext ua-wget abuse_ch
2025-10-05 06:25:19http://196.251.116.246/renji/renji.x86Offlineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:27http://196.251.116.246/renji/renji.arm6Offlineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:27http://196.251.116.246/renji/renji.arcOfflineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:27http://196.251.116.246/renji/renji.mpslOfflineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:27http://196.251.116.246/renji/renji.armOfflineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:26http://196.251.116.246/renji/renji.sh4Offlineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:26http://196.251.116.246/renji/renji.arm7Offlineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:26http://196.251.116.246/renji/renji.mipsOfflineelf mirai ext ua-wget abuse_ch
2025-10-05 06:24:24http://196.251.116.246/renji/renji.i468Offlineelf ua-wget abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-10-06 19:01:24e9adfb0ec60476cbc147d52828c722770deed9bc4ac8d0f9a91cdb5c54926eccshMirai
2025-10-06 19:01:1454bd7b97efa5cd83155edd7f3077db53857b38864969f4a2b1ce3ce9c31a996eelfMirai
2025-10-05 06:27:25e41b7dcdc2b1890ab60902d7c59b04c55517de3d702f8e5e8b00984fe6c4721felfMirai
2025-10-05 06:26:093a006c800aa1f1e5b9584b38e60a13c8f3fcdc6ca55ef8ec5670412d7fa6a8c3elfMirai
2025-10-05 06:26:09cc0918dbb2a3d0ec79d31287892b365ffb3cc812e5300cccec3cac5832f65e70elfMirai
2025-10-05 06:26:09427a0c4baf1949ff74507734759fa55a2b20aed895f11e2c4ad014a7300121b8elfMirai
2025-10-05 06:25:1931972bc808e9f06a2bacb1c194e25e810590fbd52fef4cd0305740e240ca4d48elfMirai
2025-10-05 06:25:193b8b3166046f6310c6ff7e99e7a3766ec3f516f077fc6d535ccf33f1b3346bc9elfMirai
2025-10-05 06:25:19a6a3fb6b321c100947d2e47c153539481ddb9687f2f9acb2b80452c22f9a42baelfMirai
2025-10-05 06:24:27fa37a402046a41c935e53266abc74cb7d6420348c2c72b845f0f02a8cd0e9c19elfMirai
2025-10-05 06:24:27f72e24eca09cb6c5163722c1cade919e29d999be2e728165a9aa2ad500d2c518elfMirai
2025-10-05 06:24:27b2669b17e9b6f3344abe99990ac485f1a9b4f011bf4c23c42ca29b661c9cc8d7elfMirai
2025-10-05 06:24:27005af579f5e913be2474eda75d957906973487bfc3f7d009043bfd4544e22ad8elfMirai
2025-10-05 06:24:2678efee6f5bb1e4d6c63cf1d0cc3995f7d0d7bbbef2a57bdeb3fadfd540da1406elfMirai
2025-10-05 06:24:262f132310ed9eb143c1006fc6a22161deae113f3b9d1c037386007622708ec521elfMirai
2025-10-05 06:24:262e5116d89acf9f1d1c20ac896bfe6280e4c5e4dd6044ad5e94bc10310a35e667elfMirai