URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-09 09:08:02	195.20.49.125		Not listed	AS31624 VFMNL-AS	NL	no
2021-07-23 10:35:32	185.178.208.139	ddos-guard.net	Not listed	AS57724 DDOS-GUARD	RU	no
2021-07-18 17:42:04	107.172.101.106	107-172-101-106-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	no
2021-07-20 08:23:17	104.21.56.147		Not listed	AS13335 CLOUDFLARENET	n/a	no
2021-07-20 08:23:17	172.67.152.187		Not listed	AS13335 CLOUDFLARENET	n/a	no

Malware URLs

• URLs
• Payloads