URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry


Host: 45.61.149.68
Firstseen:2025-09-17 15:53:04 UTC
Total malware sites :5
Online malware sites :0 (0%)
Offline Malware sites :5 (100%)

IP addresses


The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)IP addressHostnameSBLASNCountryActive?
2025-09-17 15:53:06 45.61.149.6868.149.61.45.static.cloudzy.comNot listedAS14956 ROUTERHOSTING- USyes

Malware URLs


The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)URLStatusTagsReporter
2025-09-17 15:53:13http://45.61.149.68:8000/vi1433.exeOfflineMetasploit BlinkzSec
2025-09-17 15:53:09http://45.61.149.68:8000/tmp53.exeOffline BlinkzSec
2025-09-17 15:53:09http://45.61.149.68:8000/vs8080.exeOffline BlinkzSec
2025-09-17 15:53:08http://45.61.149.68:8000/8.exeOfflineCobaltStrike ext BlinkzSec
2025-09-17 15:53:06http://45.61.149.68:8000/aaa.exeOffline BlinkzSec

The table below shows recent payloads delivery by this host.

Firstseen (UTC)SHA256 hashFile typeBazaarSignature
2025-09-17 15:53:1383a237bd8956ab74d8c28bbce44d6a10151b3a52c684f5756de085f7cfcffe65exeMetasploit
2025-09-17 15:53:092ecfdc00fd003a0abd1cd226b10a0efd99b03cf2685fe061b8597bc7eab548d4exe 
2025-09-17 15:53:094d2d6c58df17bc95268962737a5f6233f446d525c207caa2ceef0d8758c1bf3fexe 
2025-09-17 15:53:08b4e6fdd393c8a8768621713667c5e239b0df92cff2741513bdc2b03e3b453082exeCobaltStrike
2025-09-17 15:53:067f651ca92b6d1f71dd2cb8e3af99998ccdc20fec2c9569dec3f2764803742dc0exe