URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2026-04-29 22:07:01 | 54.243.117.197 | ec2-54-243-117-197.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 |  US | yes |
| 2026-04-29 22:07:01 | 13.223.25.84 | ec2-13-223-25-84.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | yes |
| 2026-04-30 16:27:59 | 98.82.42.139 | ec2-98-82-42-139.compute-1.amazonaws.com | Not listed | AS16509 AMAZON-02 | US | no |
| 2026-04-30 16:27:59 | 52.201.53.166 | ec2-52-201-53-166.compute-1.amazonaws.com | Not listed | AS14618 AMAZON-AES | US | no |
| 2026-02-11 04:03:23 | 208.91.197.46 | Not listed | AS40034 CONFLUENCE-NETWORK-INC |  VG | no | |
| 2025-12-20 12:57:33 | 212.92.105.215 | Not listed | AS43350 NFORCE |  NL | no | |
| 2026-01-17 11:01:18 | 212.92.105.218 | Not listed | AS43350 NFORCE | NL | no | |
| 2025-12-24 16:36:53 | 212.92.105.210 | Not listed | AS43350 NFORCE | NL | no | |
| 2025-12-16 19:25:32 | 212.92.105.219 | Not listed | AS43350 NFORCE | NL | no | |
| 2026-01-07 07:47:05 | 212.92.105.211 | Not listed | AS43350 NFORCE | NL | no |
