URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	45.94.31.59
Firstseen:	2026-02-22 12:59:13 UTC
Total malware sites :	2
Online malware sites :	2 (100%)
Offline Malware sites :	0 (0%)
Newest active malware site :	2026-02-22 13:04:33 UTC
Oldest active malware site :	2026-02-22 12:59:22 UTC (Age: 5 days, 20 hours, 15 minutes)

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2026-02-22 12:59:22	45.94.31.59	45.94.31.59.powered.by.rdp.sh	SBL687507	AS210558 services-1337-gmbh	NL	yes

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2026-02-22 13:04:33	https://45.94.31.59/Bin/ScreenConnect.ClientSet...	Online	msi	Anonymous
2026-02-22 12:59:22	https://45.94.31.59/bin/support.client.exe?i=&e...	Online	exe	Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2026-02-22 13:04:33	be05b7a82dd6aac8bac8f0e6b0a4733298919b3a6354f4e6a8efb8cbd8ab33ab	msi
2026-02-22 12:59:21	99020d587049ce3bcec5d07e636bd47a30f552cb3d1ceaa2aded7e01583dae13	exe