User ARCnetX joined AbuseIPDB in January 2022 and has reported 319 IP addresses.

Standing (weight) is good.

ACTIVE USER
IP Date Comment Categories
🇳🇱 194.87.31.203
Direct IP malicious download 194.87.31.203/Downloads/svchost.lnk
Exploited Host
🇳🇱 5.253.59.3
Direct IP URL malicious download 5.253.59.3/Downloads/Investment%20Plan%203.12.2024.pdf.lnk
Exploited Host
🇺🇸 104.219.234.170
RedLine Stealer: 104.219.234.170 TCP Port 16383
Exploited Host
🇩🇪 109.107.181.162
Meduza Stealer C2: TCP Port 15666 Web Site boasts Meduza Stealer 2.15
Exploited Host
🇸🇨 185.196.11.237
Rhadamanthys C2: https://185.196.11.237:9697/f002171ab05c7/hip4946p.881o6
Exploited Host
🇸🇨 185.208.158.96
Amadey Stealer C2: 185.208.158.96/mzmtrpwoe113ee/index.php
Exploited Host
🇺🇸 5.161.22.78
Fredy Stealer C2: TCP Port 6969
Exploited Host
🇨🇭 147.45.44.221
StealC C2 http://147.45.44.221/28166bd28a5d19e6.php
Exploited Host
🇸🇨 185.196.9.26
Redline Stealer C2: 185.196.9.26 TCP Port 6302
Exploited Host
🇺🇸 13.91.222.70
Electron based Infostealer C2 at TCP port 1337
Exploited Host
🇪🇸 45.200.149.53
StealC C2: http://45.200.149.53/281e4696f6bc0de6.php
Exploited Host
🇭🇰 47.238.97.220
GhostRAT C2: TCP Port 7001
Exploited Host
🇸🇨 185.215.113.100
StealC C2 http://185.215.113.100/e2b1563c6670f193.php
Exploited Host
🇹🇷 181.214.223.110
Exploited Host
🇺🇸 167.94.7.114
Exploited Host
🇸🇨 185.208.158.36
Password stealer C2, 185.208.158.36 TCP Port 15111
Exploited Host
🇸🇨 185.215.113.22
RedLine Stealer C2 Bot ID: @exelzt Auth Header: 2512ea8d547d5afb96b66992e487c694
Exploited Host
🇳🇱 45.152.115.5
StealC C2 - http://45.152.115.5/587ec30955d49a9c.php
Exploited Host
🇳🇱 217.138.215.82
StealC C2: http://217.138.215.82/8c77d85de581124b.php
Exploited Host
🇮🇪 20.82.141.111
AsyncRAT C2 TCP Ports 6570, 6576
Exploited Host
🇺🇸 92.246.138.20
Password and data stealer dump site http://92.246.138.20/storage
Exploited Host
🇬🇧 51.75.171.9
RHADAMANTHYS C2: https://51.75.171.9:5151/9640d96bbead45f349f3ab9/xteam.api
Exploited Host
🇨🇭 185.196.9.78
REMCOS C2 TCP Ports: 24041, 5023
Hacking
🇷🇺 45.9.74.32
WebDAV Malware: \\45.9.74.32@8888\davwwwroot\1567.dll,entry
Exploited Host
🇩🇪 168.119.115.138
Vidar Stealer C2: TCP Port 9000
Hacking