URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
| Host: | 209.145.51.44 |
|---|---|
| Firstseen: | 2023-07-22 03:48:03 UTC |
| Total malware sites : | 7 |
| Online malware sites : | 1 (14%) |
| Offline Malware sites : | 6 (86%) |
| Newest active malware site : | 2025-08-16 21:08:13 UTC |
| Oldest active malware site : | 2025-08-16 21:08:13 UTC (Age: 9 months, 13 days, 19 hours, 56 minutes) |
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2023-07-22 03:48:05 | 209.145.51.44 | vmi1159541.contaboserver.net | Not listed | AS40021 CONTABO-40021 |  US | yes |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2025-08-16 21:08:13 | http://209.145.51.44/keepon.exe | Online | exe xworm |  abuse_ch |
| 2024-10-20 11:31:06 | http://209.145.51.44/post3.bat | Offline | bat xworm |  abus3reports |
| 2024-10-20 11:30:08 | http://209.145.51.44/chromeEngine.vbs | Offline | vbs xworm | abus3reports |
| 2023-07-22 04:39:05 | http://209.145.51.44/payload.exe | Offline | 32 exe Neutrino  |  zbetcheckin |
| 2023-07-22 04:34:05 | http://209.145.51.44/elevator.exe | Offline | 64 exe rustystealer | zbetcheckin |
| 2023-07-22 04:34:05 | http://209.145.51.44/asas.exe | Offline | 64 exe xworm | zbetcheckin |
| 2023-07-22 03:48:05 | https://209.145.51.44/RobluxCoins.exe | Offline | 64 exe Sliver | zbetcheckin |
The table below shows recent payloads delivery by this host.