IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
Important Note: 104.21.14.245 is an IP address from within
our whitelist belonging to the subnet
104.16.0.0/13,
which we identify as: "Cloudflare Reverse Proxy".
Whitelisted netblocks are typically owned by trusted entities, such as Google
or Microsoft who may use them for search engine spiders. However, these same entities
sometimes also provide cloud servers and mail services which are easily abused. Pay special
attention when trusting or distrusting these IPs.
We have detected malicious redirection targeting "Jojobet" users, where traffic is diverted to fraud ...
show moreWe have detected malicious redirection targeting "Jojobet" users, where traffic is diverted to fraudulent resources such as: https://jojo.qiris-adres2026.com. This redirection leads unsuspecting users to phishing pages, enabling unauthorized collection of credentials and personal data.
This activity constitutes fraud, unfair competition, and infringement upon our intellectual property rights. It also violates consumer protection regulations by misleading users and causing reputational and financial harm.
We kindly request AbuseIPDB to take prompt measures to disable this malicious infrastructure and prevent further abuse.
Best regards,
Brand Protection Officer
Jojobet Legal Team
show less
We have detected malicious redirection targeting "Jojobet" users, where traffic is diverted to fraud ...
show moreWe have detected malicious redirection targeting "Jojobet" users, where traffic is diverted to fraudulent resources such as: https://jojobet.hemengirislerim.info. This redirection leads unsuspecting users to phishing pages, enabling unauthorized collection of credentials and personal data.
This activity constitutes fraud, unfair competition, and infringement upon our intellectual property rights. It also violates consumer protection regulations by misleading users and causing reputational and financial harm.
We kindly request AbuseIPDB to take prompt measures to disable this malicious infrastructure and prevent further abuse.
Best regards,
Brand Protection Officer
Jojobet Legal Team
show less
Added into the Abuse.ch ThreatFox IOC database by @drb_ra for being involved with the malware family ...
show moreAdded into the Abuse.ch ThreatFox IOC database by @drb_ra for being involved with the malware family Cobalt Strike with tags: CobaltStrike, cs-watermark-1234567890, TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited.
Source: https://threatfox.abuse.ch/ioc/1119383/
show less
Added into the Abuse.ch ThreatFox IOC database by @drb_ra for being involved with the malware family ...
show moreAdded into the Abuse.ch ThreatFox IOC database by @drb_ra for being involved with the malware family Cobalt Strike with tags: CobaltStrike, cs-watermark-1234567890, TENCENT-NET-AP Shenzhen Tencent Computer Systems Company Limited.
Source: https://threatfox.abuse.ch/ioc/1119366/
show less
Hacking
Exploited Host
Anonymous
From: KOHL's <[email protected]>
We have been trying to reach you - {userna ...
show moreFrom: KOHL's <[email protected]>
We have been trying to reach you - {username}; Please respond!
Reward scam – illicit use of Kohl's branding <http://serbyakos.com/img/RM1qZlXI7ysjq2dJ>
Received: from 194.246.38.55 (EHLO voluptatibuswjeyo.doprnkbol.uk)
Header doprnkbol.uk = 194.246.38.53 MAGIT'ST SRL
Header: Reply-to: [email protected] = 67.195.204.72, 67.195.204.73 Oath
Message URL serbyakos.com = 193.32.161.38 MAGIT'ST SRL (aka domain tosbackrido.co.uk, wewe.digital, pornfucknwos.com, candyerax.com, cherkal.info – same IP) – malicious RU BOT redirects:
- asbestosgun.com = 193.163.199.148 Baxet Group
- uphillbalance.info = 104.21.14.245, 172.67.160.207 Cloudflare - MALICIOUS
- trk-epicurei.com = 104.21.2.131, 172.67.129.61 Cloudflare
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Anonymous
From: KOHL's <[email protected]>
We have been trying to reach you - {userna ...
show moreFrom: KOHL's <[email protected]>
We have been trying to reach you - {username}; Please respond!
Reward scam – illicit use of Kohl's branding <http://serbyakos.com/img/RM1qZlXI7ysjq2dJ>
Received: from 194.246.38.55 (EHLO voluptatibuswjeyo.doprnkbol.uk)
Header doprnkbol.uk = 194.246.38.53 MAGIT'ST SRL
Header: Reply-to: [email protected] = 67.195.204.72, 67.195.204.73 Oath
Message URL serbyakos.com = 193.32.161.38 MAGIT'ST SRL (aka domain tosbackrido.co.uk, wewe.digital, pornfucknwos.com, candyerax.com, cherkal.info – same IP) – malicious RU BOT redirects:
- asbestosgun.com = 193.163.199.148 Baxet Group
- uphillbalance.info = 104.21.14.245, 172.67.160.207 Cloudflare - MALICIOUS
- trk-epicurei.com = 104.21.2.131, 172.67.129.61 Cloudflare
show less
Fraud Orders
Phishing
Web Spam
Email Spam
Spoofing
Bad Web Bot
Exploited Host
Cluster member 192.168.56.166 (-) said, TEMPDENY 104.21.14.245, Reason:[(bind) bind triggered by 104 ...
show moreCluster member 192.168.56.166 (-) said, TEMPDENY 104.21.14.245, Reason:[(bind) bind triggered by 104.21.14.245 (CA/Canada/-): 10 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER
show less
(bind) bind triggered by 104.21.14.245 (CA/Canada/-): 10 in the last 3600 secs; Ports: *; Direction: ...
show more(bind) bind triggered by 104.21.14.245 (CA/Canada/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER
show less
Brute-Force
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩