URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 195.177.94.72
Firstseen:2026-02-24 18:28:04 UTC
Total malware sites :13
Online malware sites :0 (0%)
Offline Malware sites :13 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2026-02-24 18:28:23 195.177.94.7272.94.177.195.in-addr.arpaSBL694582AS214961 STELLARGROUPSAS- FRyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2026-07-29 13:49:41http://195.177.94.72:3594/t/kal64OfflineBillGates cesnet_certs
2026-07-29 13:49:39http://195.177.94.72:3594/s/kswpadOfflineBillGates cesnet_certs
2026-07-29 13:49:20http://195.177.94.72:3594/b/kswpadOfflineBillGates cesnet_certs
2026-07-29 13:49:06http://195.177.94.72:3594/b/amd64Offline cesnet_certs
2026-07-29 13:48:58http://195.177.94.72:3594/s/linuxOffline cesnet_certs
2026-07-29 13:48:45http://195.177.94.72:3594/t/amd64Offline cesnet_certs
2026-07-29 13:48:45http://195.177.94.72:3594/t/kswpadOfflineBillGates cesnet_certs
2026-07-29 13:48:35http://195.177.94.72:3594/s/kal64OfflineBillGates cesnet_certs
2026-07-29 13:48:33http://195.177.94.72:3594/s/amd64Offline cesnet_certs
2026-07-29 13:48:27http://195.177.94.72:3594/b/linuxOffline cesnet_certs
2026-07-29 13:48:15http://195.177.94.72:3594/b/kal64OfflineBillGates cesnet_certs
2026-02-24 18:29:06https://195.177.94.72/bin/support.client.exeOfflineconnectwise exe Anonymous
2026-02-24 18:28:23https://195.177.94.72/bin/ScreenConnect.ClientS...Offlineconnectwise msi Anonymous