User Ramon Fernandez
joined AbuseIPDB in October 2023 and has reported 1 IP
addresses.
Standing (weight) is
good.
INACTIVE USER
| IP |
Date |
Comment |
Categories |
|
🇫🇷
217.69.0.159
|
|
C2 server for Python supply-chain malware targeting Solana developers. Malware uses Base64+zlib+XOR ...
show more
C2 server for Python supply-chain malware targeting Solana developers. Malware uses Base64+zlib+XOR obfuscation, retrieves C2 URL from Solana blockchain memo (wallet BjVeAjPrSKFiingBn4vZvghsGj9KCE8AJVtbc9S8o8SC), downloads Node.js, executes AES-encrypted JS payload.
show less
|
Exploited Host
Web App Attack
|