Unknown source code changes in our system were linked back to this offensive IP address.

Login attempts at unusual times (e.g., in the middle of the night).

This IP belongs to AmerisourceBergen.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

The IP attempted to create new directories on the FTP server.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

Multiple requests with the same Proxy-Connection header.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

Several instances of password stealers were traced back to this notorious IP.

The IP made multiple requests with the same Warning header.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

This IP belongs to Canadian Department of Defense.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

This IP belongs to Citigroup.

The IP attempted to send emails with misleading headers from the Mail server.