This IP belongs to Telus Communications.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

It attempted to exploit known vulnerabilities in the IMAP protocol.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

It actively sought to exploit unpatched software within our server applications.

This IP belongs to Vodacom.

This IP belongs to Travelers Cos.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

It attempted to login to the SASL server with an invalid password.

Unusual patterns in user agent strings.

The IP address attempted to register as a SIP user with an invalid username.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

The IP attempted to use the POP3 server to distribute malware.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

It made multiple requests with the same X-Requested-With header.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

The IP has been traced back to system monitors, aiming to watch and record user activity.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

The IP attempted to use the POP3 server to relay spam.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.