URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	130.94.103.77
Firstseen:	2026-10-21 05:33:05 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-10-21 05:33:09	130.94.103.77		Not listed	AS154177 LIGHT4-AS-AP	MX	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-10-21 05:33:13	http://130.94.103.77:7001/fs64.exe	Offline	hacktool	z3r0s6
2026-10-21 05:33:12	http://130.94.103.77:7001/mimikatz.exe	Offline	exe mimikatz	z3r0s6
2026-10-21 05:33:10	http://130.94.103.77:7001/iis64.dll	Offline	backdoor dll	z3r0s6
2026-10-21 05:33:10	http://130.94.103.77:7001/iis32.dll	Offline	backdoor dll	z3r0s6
2026-10-21 05:33:09	http://130.94.103.77:7001/rc_deploy.ps1	Offline	backdoor ps1	z3r0s6

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Signature
2026-10-21 05:33:13	b7571f196cd68f0ed7173f462371e9d477230152345e982deb7fa155f8bd890a	exe
2026-10-21 05:33:11	61c0810a23580cf492a6ba4f7654566108331e7a4134c968c2d6a05261b2d8a1	exe	MimiKatz
2026-10-21 05:33:10	285b0f142b91778be8c803d5e1ae992434d867b8b6752b1a2b86c6a48ae3f884	dll
2026-10-21 05:33:09	1c8fc5bf2fae80793a0c68eeb1025d27c8f6bdbb5788d91250bf37b4ba52d71a	dll