boardiesofwales.co.uk - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

The webmaster of boardiesofwales.co.uk joined AbuseIPDB in February 2025 and has reported 3 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇻🇳 103.209.61.108	15 May 2026	C2 server for PySteal infostealer (HEUR:Trojan.Multi.Powesta.d). Malware was dropped on a Windows 11 ... show more C2 server for PySteal infostealer (HEUR:Trojan.Multi.Powesta.d). Malware was dropped on a Windows 11 workstation on 03/04/2026 via a folder named SAM_Support_Session. It used Windows DPAPI (CryptUnprotectData) to decrypt browser-saved passwords, and sqlite3 to read Chrome/Edge credential and cookie databases directly. Stolen data was encrypted with RSA/AES and exfiltrated to this IP on port 56001. Malware included evidence-clearing and exfiltration scripts containing Chinese characters. The attacker used a stolen PayPal session cookie to make an unauthorised financial transaction without requiring login or 2FA. Kaspersky Rescue Disk detected persistence via HKCU Run keys (SAM_Panel_Backup, SAM_Data_ClearBin). Infection confirmed active 03/04/2026–12/05/2026. show less	Fraud Orders Hacking Exploited Host
🇨🇭 212.11.64.7	20 Oct 2025	Attempting to connect to our firewall via the SSL VPN	Brute-Force
🇹🇷 195.177.95.180	20 Feb 2025	Unauthoised attempted VPN logins.	VPN IP Brute-Force