SecureFeed - Is 185.196.11.64 Malicious? Host Analysis

Results for 185.196.11.64

Classification:

malicious

IP:

185.196.11.64

EntityType:

Tags:

N/A

Malicious Tags:

malware malicious mirai final ransomware phishing ransomware scam spy spyware

Country:

City:

Bern

State:

Bern

Postal Code:

N/A

Lat/Lon:

46.9480°, 7.4474°

ISP Name:

Simple Carrier LLC

ISP Network:

185.196.8.0/22

Source	Description	Last Seen	References
Hybrid-Analysis	Host has shown activity related to malware.	01/13/2025 19:00:29 (UTC)	binance-imposta-bollo.com,kucoin-form.com,webdisk.binance-imposta-bollo.com
Abuse.ch ThreatFox	Deemed malicious due to: Mirai	05/08/2024 16:50:06 (UTC)	dead-cheap-doma.in,poor-indians-tax-me.icu
Abuse.ch UrlHaus	Url associated with malware and {action}	05/08/2024 16:44:06 (UTC)	185.196.11.64,dead-cheap-doma.in,poor-indians-tax-me.icu
Abuse.ch UrlHaus	Url associated with malware and elf	04/22/2024 10:48:44 (UTC)	185.196.11.64,http://185.196.11.64/arm4,http://185.196.11.64/arm5,http://185.196.11.64/arm6,http://185.196.11.64/arm7,http://185.196.11.64/mips,http://185.196.11.64/mpsl,http://185.196.11.64/x86_64
oisd.nl	Malware detected with this host, including blocks ads, (mobile) app ads, phishing, malvertising, malware, spyware, ransomware, cryptoJacking, scam, etc.	01/12/2025 00:05:21 (UTC)	binance-imposta-bollo.com,poor-indians-tax-me.icu