URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-08-23 02:31:45	172.238.172.122	k8s-svc-lander-openprovider-expired-us-ord-03.parklogic.net	Not listed	AS63949 AKAMAI-LINODE-AP	US	yes
2026-08-23 02:31:45	172.236.104.157	k8s-svc-lander-openprovider-expired-us-ord-02.parklogic.net	Not listed	AS63949 AKAMAI-LINODE-AP	US	yes
2026-08-23 02:31:45	172.236.104.43	k8s-svc-lander-openprovider-expired-us-ord-01.parklogic.net	Not listed	AS63949 AKAMAI-LINODE-AP	US	yes
2025-08-25 19:38:19	188.114.96.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-08-25 19:38:19	188.114.97.3		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-09-04 08:20:30	104.21.95.92		Not listed	AS13335 CLOUDFLARENET	n/a	no
2025-09-04 08:20:30	172.67.144.19		Not listed	AS13335 CLOUDFLARENET	n/a	no
2026-04-01 10:05:48	188.114.96.12		SBL687667	AS13335 CLOUDFLARENET	n/a	no
2026-04-01 10:05:48	188.114.97.12		Not listed	AS13335 CLOUDFLARENET	n/a	no

Malware URLs

• URLs
• Payloads