IP address 45.150.109.209

45.150.109.209:443 · Mythic

no longer listed Last confirmed 2026-09-17 06:32 UTC

The names above are what the certificate asserts, signed by the issuer it names, which may be a public certificate authority, a private one, or one a builder ships. This site verifies none of it, so treat a name here as a lead to investigate, never an attribution.

Neighbourhood · 45.150.109.0/24 · 1 other host

1 other host in this archive is in the same /24, shown for context.

Deploy

No listener here is listed, so there are no rules. The queries below search past traffic: run them once, not as a standing alert.

Each query searches the last 30 days of your logs for connections to these listeners. Queries hold only addresses, ports and file hashes.

DeviceNetworkEvents
| where Timestamp > ago(30d)
| where (RemoteIP == "45.150.109.209" and RemotePort in (443))

CommonSecurityLog
| where TimeGenerated > ago(30d)
| where (DestinationIP == "45.150.109.209" and DestinationPort in (443))

| tstats summariesonly=false count min(_time) as first_time max(_time) as last_time
    from datamodel=Network_Traffic where earliest=-30d
    ((All_Traffic.dest_ip="45.150.109.209" (All_Traffic.dest_port=443)))
    by All_Traffic.src_ip All_Traffic.dest_ip All_Traffic.dest_port

network where
  (destination.ip == "45.150.109.209" and destination.port in (443))

Cite this record