๐จ๐ฆ
1gz
2025-12-22 15:51:03
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.114 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐จ๐ฆ
1gz
2025-12-22 08:07:02
(6 months ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /kerko.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฏ๐ต
pota
2025-03-01 07:47:00
(1 year ago)
*** Phishing website Spoofing Amazon.co.jp
---- redirect from
http://big.ydiwl.com/token?token=6sp ...
show more
*** Phishing website Spoofing Amazon.co.jp
---- redirect from
http://big.ydiwl.com/token?token=6spvPRtDcw1TONj96c
http://ezw.yzwelq1k.com/token?token=yHlz70cVMg6xyfjUlT
http://big.yzwelq1k.com/token?token=YyT1JXAiH1yeKQMwIW
http://big.jump100.com/token?token=rFUGMDvsAQ5ahWVg5p
http://big.yzwelq1k.com/token?token=IJGvbbUK1SFRBni2ce
http://ezw.art-gg.com/token?token=3n5iS2mX41DFjr4G0q
http://ezw.art-gg.com/token?token=UiXg6yPGtOwxlVTOh1
http://ezw.jump100.com/token?token=Z6gryGWYn37MuOtmR8
http://ezw.ydiwl.com/token?token=NPZBD5oUxcY3ok0YQp
IP: 43.163.111.205
---- redirect to
http://zkgsyy.com/amalogin/
http://leyi688.com/amalogin/
http://fshdnc.com/amalogin/
http://chwlygy.com/amalogin/
http://lue5.com/amalogin/
http://fhcoa.com/amalogin/
http://cjbar.com/amalogin/
http://kjscp.com/amalogin/
http://zghwggw.com/amalogin/
http://syqyzx.com/amalogin/
IP: 43.163.127.54
----
hosting: Tencent Cloud Computing / Aceville Pte.Ltd.
show less
Phishing
Email Spam
Spoofing
๐ฏ๐ต
pota
2025-02-28 15:50:00
(1 year ago)
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Com ...
show more
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Commerce
e-mail receive date _ URL:
Fri, 28 Feb 2025 16:18:12 +0900 * https://cqpingao.com/amalogin
Fri, 28 Feb 2025 18:00:58 +0900 * https://bardboo.com/amalogin
Fri, 28 Feb 2025 19:26:00 +0900 * https://liboera.com/amalogin
IP address: 43.163.127.54
country: Singapore
hosting: Tencent Cloud Computing / Aceville Pte.Ltd.
contact form: https://www.tencentcloud.com/contact-us
show less
Phishing
Email Spam
Spoofing
๐ฏ๐ต
fred
2025-02-28 11:52:24
(1 year ago)
as cloudstarry.com for Amazon fake login in Japanese;
4 more within next 2 hrs using domain names li ...
show more
as cloudstarry.com for Amazon fake login in Japanese;
4 more within next 2 hrs using domain names like:
365fuz.com,
lgdkk.com,
liboera.com,
nulwew.com
show less
Phishing
๐ฏ๐ต
fred
2025-02-28 07:21:41
(1 year ago)
as liboera.com for Amazon fake login in Japanese;
11 more within next 4 hrs using domain names like: ...
show more
as liboera.com for Amazon fake login in Japanese;
11 more within next 4 hrs using domain names like:
365fuz.com,
bardboo.com,
blank-radio.com,
cloudstarry.com,
cqpingao.com,
csxsbj.com,
lgdkk.com,
liboera.com
show less
Phishing
๐ฏ๐ต
pota
2025-02-24 06:06:00
(1 year ago)
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Com ...
show more
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Commerce
e-mail receive date: Mon, 24 Feb 2025 07:29:22 +0900
---- redirect from
URL: http://web.cherryyer.com/token?token=GdxYwSncoGbil2ft
IP address: 43.163.111.205
---- redirect to
URL:
http://js-tyfs.com/lanerbeck/
http://la-mecque.com/lanerbeck/
IP address: 43.163.127.54
----
country: Singapore
hosting: Tencent Cloud Computing / Aceville Pte.Ltd.
contact form: https://www.tencentcloud.com/contact-us
e-mail: [email protected]
show less
Phishing
Email Spam
Spoofing
๐ฏ๐ต
fred
2025-02-23 12:44:38
(1 year ago)
as scqcyz.com for Amazon fake login in Japanese;
12 more attacks within next 21 hrs using domain nam ...
show more
as scqcyz.com for Amazon fake login in Japanese;
12 more attacks within next 21 hrs using domain names like:
cinctus.cn,
collettparkcafe.com,
dijqr.cn,
dsperformingarts.com,
gts5.com,
ijmox.cn,
khaya.cn,
krpropertygroup.com,
paooap.cn,
qahhaq.cn,
reasonableinn.com,
xjfjsh.com
show less
Phishing
๐ฏ๐ต
pota
2025-02-23 12:39:00
(1 year ago)
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Com ...
show more
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Commerce
e-mail receive date _ URL:
Sun, 23 Feb 2025 17:18:59 +0900 * https://collettparkcafe.com/lanerbeck
Sun, 23 Feb 2025 19:56:59 +0900 * https://xjfjsh.com/lanerbeck
Sun, 23 Feb 2025 20:28:21 +0900 * https://reasonableinn.com/lanerbeck
IP address: 43.163.127.54
country: Singapore
hosting: Tencent Cloud Computing / Aceville Pte.Ltd.
contact form: https://www.tencentcloud.com/contact-us
show less
Phishing
Email Spam
Spoofing
๐ฏ๐ต
pota
2025-02-23 10:01:00
(1 year ago)
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Com ...
show more
*** Phishing website Spoofing Amazon.co.jp
genuine site: https://www.amazon.co.jp/
category: E-Commerce
e-mail receive date: Sun, 23 Feb 2025 17:18:59 +0900
URL: https://collettparkcafe.com/lanerbeck
IP address: 43.163.127.54
country: Singapore
hosting: Tencent Cloud Computing / Aceville Pte.Ltd.
contact form: https://www.tencentcloud.com/contact-us
show less
Phishing
Email Spam
Spoofing
๐ฏ๐ต
fred
2025-02-23 04:53:20
(1 year ago)
as krpropertygroup.com for Amazon fake login in Japanese;
another 13 attackes within next 6 hrs usin ...
show more
as krpropertygroup.com for Amazon fake login in Japanese;
another 13 attackes within next 6 hrs using domain names like:
bdkty.cn,
cekpq.cn,
collettparkcafe.com,
dknuv.cn,
dsperformingarts.com,
ejkln.cn,
gts5.com,
ijovz.cn,
reasonableinn.com,
unihomecollection.com
show less
Phishing