AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User cleanerweb joined AbuseIPDB in December 2025 and has reported 136 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇺🇸 163.61.188.2	02 Jun 2026	This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, ... show more This is lytehosting.com who are a Nigerian 419 advanced fee fraud facilitating scam hosting company, who help facilitate fraud for other Nigerian cybercriminals by not shutting down scam sites and allowing them to operate with impunity. Name Servers: dns1.lytehosting.com dns2.lytehosting.com dns3.lytehosting.com dns4.lytehosting.com https://dns.coffee/nameservers/dns1.lytehosting.com https://dns.coffee/nameservers/dns2.lytehosting.com https://dns.coffee/nameservers/dns3.lytehosting.com https://dns.coffee/nameservers/dns4.lytehosting.com Also using the following IPs to host scam sites: 163.61.188.2 / 163.61.188.5 / 163.61.188.7 / 163.61.188.9 / 163.61.188.105 This is AS153568 NEW DHAKA HARDWARE AS who have multiple SBL listings on Spamaush : newdhaka.net currently has 6 SBL listings for IPs under its responsibility. https://check.spamhaus.org/sbl/listings/newdhaka.net/ show less	Phishing
🇩🇪 86.107.77.213	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.119	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.112	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.108	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.98	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. They use the following IPs: 86.107.77.91 86.107.77.95 86.107.77.98 86.107.77.108 86.107.77.112 86.107.77.119 86.107.77.213 We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇩🇪 86.107.77.91	27 May 2026	This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host tha ... show more This IP is being used by telahosting.com who are a 419 advanced fee fraud scam facilitating host that hosts scam sites for Nigerian fraudsters. We can see a list of the scam sites hosted here: https://dns.coffee/nameservers/dns1.tela-host.com We can see some of the fake investment scam sites here: alphaequity.ltd extremassets.com 1world-cryp2.us amtefis.pro bridgewayshares.com m36digital.com forexoption.info goldpocketoption.com finance-markex.info pocketoptionsinvestmentcompany.info monumentaccess.com hostbet.in have a history of allowing these scam hosts to use their servers and ignoring all abuse reports. show less	Phishing
🇺🇸 216.152.151.9	26 May 2026	This IP is being used by 419 advanced fee fraud scam facilitators to host scam sites for other Niger ... show more This IP is being used by 419 advanced fee fraud scam facilitators to host scam sites for other Nigerian scammers The following nameservers are being used ns1.redhosta.com ns2.redhosta.com We can see all of the scam sites here: https://dns.coffee/nameservers/ns1.redhosta.com Here are some of the scam sites hosted on this server: truistherionline.com \| fake bank scam thewestbkkonline.com \| fake bank scam lexonumdelivery.com \| fake logistics scam fedcargologistics.com \| fake logistics scam primaxaitrade.com \| fake investment scam show less	Phishing
🇺🇸 204.13.237.20	25 May 2026	sailexhost.com - who are a 419 advanced fee fraud facilitating host, people who run sailexhost.com a ... show more sailexhost.com - who are a 419 advanced fee fraud facilitating host, people who run sailexhost.com are in Nigeria. They host scam sites for Nigerian scammers, such as fake investment scams, fake bank scams, crypto wallet phishing scams, fake logistics scams and various other 419 advanced fee fraud scams designed to get the victim to pay an advanced fee for something that doesn't exist. We can see some of the scam sites on one of their many nameservers: https://dns.coffee/nameservers/ns23.sailexhosting.com alphaprocoinbot.com assetmanfaat.com bitormine.com bitormining.com blinancetrades.com evertrustinvest.live exchangemarketcoin.com fastigiumoption.com firmatrustbnk.com fxtmtrade.com globalhedgemarketingfund.com habitatgrouppanama.com investaroprofit.com leexoratradesystem.com miltacticalhub.com novaraheritage.com octaconnectledger.com ogtrx.org oxadigitals.com primecapitals.us primehubcapital.com show less	Phishing
🇩🇪 167.235.14.117	21 May 2026	This is being used by lytehosting.com as one of the many servers they use to host 419 advanced fee f ... show more This is being used by lytehosting.com as one of the many servers they use to host 419 advanced fee fraud scams on a massive scale lytehosting.com are Nigerian 419 advanced fee fraud scam facilitators and host scam sites for Nigerian scammers. They use the following nameservers: Name Servers: dns1.lytehosting.com dns2.lytehosting.com dns3.lytehosting.com dns4.lytehosting.com Here are some of the scam sites being hosted here autintl.online \| fake bank scam coinbinoz.sbs \| fake investment scam earnflow.top \| fake crypto investment scam fidshore.com \| fake logistics scam flaress.network \| crypto scam hbaz.org \| fake bank scam natiopayx.org \| fake bank scam omnimusk.live \| fake investment scam promusk.top \| fake investment scam prosevex.com \| fake investment scam show less	Phishing
🇳🇱 192.142.10.186	21 May 2026	hosting a large amount of 419 advanced fee fraud scams, I believe this is being run by hostcreed.com ... show more hosting a large amount of 419 advanced fee fraud scams, I believe this is being run by hostcreed.com who are Nigerian 419 advanced fee fraud scam facilitators. We can see the scam sites listed here: https://dns.coffee/nameservers/ns1.hlogicdock.cloud Here are some of the scam sites being hosted here, all sites verified as 419 advanced fee fraud scam sites and flagged as malicious by Netcraft: fake investment scams: ---------------------- astrieycapital.com crypishrre.com fortifdue.online (flagged as malicious in Chrome) nobitsventure.com rdmprotocol.online smartwaveportfolio.com stickoinai.com fake bank scams: ---------------------- bluecresttbs.com bluepillarstone.com coasmerb.com dierechnungen.com goldbridgeplc.com grandccrest.com harborridgeway.com haventobnk.com kytrdoffshore-portal.online meritcapinc.com montconcap.com noblepayz.com pacwestbcp.com regionfinancials.com squaremaxences.com standardstrust.com torodfb.com unit5577privatedept.online untitytcu.online show less	Phishing
🇺🇸 163.61.188.9	21 May 2026	This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud orig ... show more This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud originating from West Africa on a MASSIVE scale They use the following IPs to host: 163.61.188.5 / 163.61.188.7 / 163.61.188.9 We can see the huge amount of scam sites that get added every day here: https://dns.coffee/nameservers/dns1.lytehosting.com IP is listed on Spamhaus with 3 listings: Spamhaus Blocklist (SBL), eXploits Blocklist (XBL) & CSS Blocklist (CSS) https://check.spamhaus.org/results/?query=163.61.188.9 show less	Phishing
🇺🇸 163.61.188.7	21 May 2026	This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud orig ... show more This is used by lytehosting.com who are a 419 advanced fee fraud scam host and facilitate fraud originating from West Africa on a MASSIVE scale They use the following IPs to host: 163.61.188.5 / 163.61.188.7 / 163.61.188.9 We can see the huge amount of scam sites that get added every day here: https://dns.coffee/nameservers/dns1.lytehosting.com show less	Phishing
🇩🇪 198.251.89.220	19 May 2026	Massive fraud host, Hosts 419 advanced fee fraud scam sites such as algotradehive.com https:/ ... show more Massive fraud host, Hosts 419 advanced fee fraud scam sites such as algotradehive.com https://urlscan.io/ip/198.251.89.220 Ignores all abuse reports. show less	Phishing
🇳🇱 5.182.208.206	19 May 2026	This is zencorehost.com who are a 419 advanced fee fraud scam facilitating web host and facilitate o ... show more This is zencorehost.com who are a 419 advanced fee fraud scam facilitating web host and facilitate other Nigerian scammers. https://dns.coffee/nameservers/ns1.zencorehost.com Some of the scam sites that they host: qfsworldvault.net busefin.icu cloud-asset.ltd farosonglobaltrade.ltd farossonglobaltrade.ltd futuremoneysystem.ltd quantumfinanceguide.ltd rigstock-exchange.ltd spikeultimate.ltd trustypath.ltd uniqueassets.ltd veritasinvestment.ltd globalexpress-logistics.ltd ama-invest.org arbcapital.org aureclimited.org bankabillions.org coinstonelimited.org gdinvestmentltd.org globalfundsxchange.org kizvest.org prandoxx.org promentumlimited.org qfsassestssecuritybackup.org qfsglobals.org qfsnesaravault.org qfsworldvault.org web3insight.org web3securewallet.org zenixglobaltrade.org abextradelimited.com absglobalinvest.com affiliateledgerasset.com alatuscap.com allegro-invest.com allegro-investment.com alpcotcapmanagement.com show less	Phishing
🇺🇸 163.61.188.9	18 May 2026	This is being used by lytehosting.com to host 419 advanced fee fraud scam sites, lytehosting are a N ... show more This is being used by lytehosting.com to host 419 advanced fee fraud scam sites, lytehosting are a Nigerian 419 advanced fee fraud scam facilitating host and help other Nigerian fraudsters to host scam sites and ignore all abuse complaints. This IP and many others that lytehosting use are already on the SBL at Spamhaus: https://check.spamhaus.org/results?query=163.61.188.9 We can see the huge amount of scam sites being added per day using the following nameserver: https://dns.coffee/nameservers/dns1.lytehosting.com IP is from "NEW DHAKA HARDWARE" Any email to [email protected] is ignored. show less	Phishing
🇺🇸 216.244.65.50	13 May 2026	This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam f ... show more This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam facilitators: hostseo.com / centriohost / zelt.ae) They advertise themselves on social media as a DMCA ignoring web host, what this means in practise is that they allow 419 advanced fee fraud scam sites to be hosted their without the fear of being terminated. This is hosting the following nameserver: dns1.geebytesdns.com dns2.geebytesdns.com We can see the scam sites here: https://dns.coffee/nameservers/dns1.geebytesdns.com show less	Phishing
🇬🇧 51.89.157.43	05 May 2026	This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam f ... show more This is being used by Nigerian 419 advanced fee fraud scammers geebytescloud.com (servers via scam facilitators: hostseo.com / centriohost / zelt.ae) They advertise themselves on social media as a DMCA ignoring web host, what this means in practise is that they allow 419 advanced fee fraud scam sites to be hosted their without the fear of being terminated. Except for the fact that they use OVH servers who do mind! This is hosting the following nameserver: dns24.geebyteserver.com dns25.geebyteserver.com This is one of their newer nameservers and we can see them start to move their scam sites over to this nameserver: https://dns.coffee/nameservers/dns24.geebyteserver.com For example we have: bankofameric.org (fake bank scam) 51.89.157.43 Malicious Activity! https://urlscan.io/result/019df92d-1885-7090-96b0-80d6f6a7bddc/ show less	Phishing
🇳🇱 37.49.229.75	28 Apr 2026	This is being used by Nigerian 419 advanced fee fraud scammers. This is hosting the following nam ... show more This is being used by Nigerian 419 advanced fee fraud scammers. This is hosting the following nameserver: ns1.controlpanel.sbs Who are dedicated to hosting 419 advanced fee fraud scam sites as we can see here: https://dns.coffee/nameservers/ns1.controlpanel.sbs ns1.controlpanel.sbs ex-lytehosting / hostcreed (hlogicdock.cloud) junk. These scammers have just started using a new nameserver and are moving some of their scam sites over. show less	Phishing
🇳🇱 192.142.10.72	19 Apr 2026	The fraud facilitators at Hostcreed.com are moving their scam sites to a new nameserver here: Thi ... show more The fraud facilitators at Hostcreed.com are moving their scam sites to a new nameserver here: This nameserver only exists for the sole reason of facilitating 419 advanced fee fraud scams. Proof: https://dns.coffee/nameservers/ns1.hlogicdock.cloud ISP Ultahost Inc Usage Type Data Center/Web Hosting/Transit ASN AS214036 Hostname(s) nls.hostcreed.com Domain Name ultahost.com Country 🇳🇱 Netherlands City Amsterdam, North Holland Name Servers: ns1.hlogicdock.cloud ns2.hlogicdock.cloud advancedonlineportal.com alltrustsplc.com almapharmaceuticalcompany.com assetcreditunion.com assetsgain.com assuredcryptogains.com auspostandservice.com authenticprimestransit.com baclinksolves.top beastxdev.pro benchsmp.xyz bluepillarstone.com brightremit.com capitalviax.com cargohaste.com cargowaydelivery.com chatdesco.app coinblazes.com coincloudtrading.com continentallfinance.com continentcrystal.com credimicrofinance.com cresttickets.com show less	Phishing
🇬🇧 51.89.157.40	18 Apr 2026	This is geebytescloud.com & geebytes.com who are yet another Nigerian 419 advanced fee fraud facilit ... show more This is geebytescloud.com & geebytes.com who are yet another Nigerian 419 advanced fee fraud facilitator And offering the following on their instagram page: "NO FEAR OF TAKEDOWN OR SUSPENSION OF PHISHING WEBSITE" https://dns.coffee/nameservers/dns24.geebyteserver.com IP 51.89.157.40 - HostSeo/centriohost/zelt.ae again helping to facilitate fraud. Here is some of the scam sites that they host here: bluewaveiso.com crestgloballogistics.com crestleadlogistics.com crimsonfluxfinlbk.com forwardmintbknet.com globalskycarrier.com ikebubekkuy.site intlcargoservices.com millernbiytyrify.site ms-teams-meetings-join.site nexusfinbkt.com nexusprimebkt.com odgwuhtnskwlofity.site palsf.site pixelchainartspace.com realesttips.com secureonbk.com shathletes.shop shathletes.us steadykeyob.com surelanedeliveryos.com top10investments.org ultpromachine.com xteamfxtrades.com xtmfinbk.com yamatodigitalbk.com show less	Phishing
🇺🇸 66.85.46.67	15 Apr 2026	This IP 66.85.46.67 is being used by spantrix.com who are Nigerian 419 advanced fee fraud facilitato ... show more This IP 66.85.46.67 is being used by spantrix.com who are Nigerian 419 advanced fee fraud facilitators on a massive scale. The hosting is provided by HOST4GEEKS who ignore all abuse reports, thus helping to facilitate the fraud. The nameservers are: ns1.spantrix.com ns2.spantrix.com https://dns.coffee/nameservers/ns1.spantrix.com https://dns.coffee/nameservers/ns2.spantrix.com here are some of the scam sites hosted here: litemin-hubs.com fixiprofitprime.live digitalgoldgains.online xpressbit.online deliasset.com empiredigitalcoin.com tikprompt.com smartmetrading.live amconlinefin.live dronetradesfx.com swifterex.online sunttrust-holdings.com globalexpertiser.com credit-unionbnk.com octsmartrade.live glitetrades.online viodokexmarket.com fixtrex.online coinsglobalcaptial.com wavfinagate.live smartglobaltrades.com roxxane.org revolute-direct.com novatriax.com bitwavefx.com financeexpertsllc.us primaxtrades.com kariox-shares.com everstonetrust.com show less	Phishing
🇺🇸 104.225.131.26	14 Apr 2026	This is being used by the following nameservers for hosting 419 advanced fee fraud scams and facilit ... show more This is being used by the following nameservers for hosting 419 advanced fee fraud scams and facilitating advanced fee fraud on a massive scale. Name Servers: dns1.geebyteserver.com dns2.geebyteserver.com We can see all the scam sites here: https://dns.coffee/nameservers/dns1.geebyteserver.com show less	Phishing
🇳🇱 192.142.10.72	14 Apr 2026	This hostcreed.com who provide bulletproof hosting for Nigerian 419 scammers on 192.142.10.72 The ... show more This hostcreed.com who provide bulletproof hosting for Nigerian 419 scammers on 192.142.10.72 The server is provided by ultahost.com who ignore abuse and don't act on complaints regarding fraud occurring on their servers. These sites have been set up by Nigerian scammers for the sole purpose of committing advanced fee fraud They are operating on the following nameservers: ns1.hostcreed.com ns2.hostcreed.com ns3.hostcreed.com ns4.hostcreed.com https://dns.coffee/nameservers/ns1.hostcreed.com https://dns.coffee/nameservers/ns2.hostcreed.com https://dns.coffee/nameservers/ns3.hostcreed.com https://dns.coffee/nameservers/ns4.hostcreed.com These are some of the scam sites that they host: internationalcourierdispatch.com nlcourierservice.com shektronvault.com stampnestshop.com show less	Phishing
🇺🇸 173.224.122.64	14 Apr 2026	afeeshost.com are 419 advanced fee fraud scam facilitators, they facilitate fraud on a massive scam ... show more afeeshost.com are 419 advanced fee fraud scam facilitators, they facilitate fraud on a massive scam for other Nigerian scammers. https://networksdb.io/domains-on-ip/173.224.122.64 These are the name servers that they use: Name Servers: dns1.afeeshost.ltd dns2.afeeshost.ltd dns3.afeeshost.com We can see the scale of their fraud facilitation here: https://dns.coffee/nameservers/dns1.afeeshost.ltd https://dns.coffee/nameservers/dns2.afeeshost.ltd https://dns.coffee/nameservers/dns3.afeeshost.com Here are some of the scam sites hosted here: cooperativefirst.com veritasfortis.com miningtrade.top borexpips.com globalmagicstone.org auxstandardvest.com luxontrades.com legacyline-capital.com bitfxs.shop atomicshell-grid.com firsttrust.live ussteaminggroup.com finance-core.org fwsbk.com consumercreditplc.com cadancecapitals.online argentfrontrust.com blockanix.com uscapitalvault.com primewealth.live agrogern.com trustplustrading.ltd show less	Phishing