This IP belongs to Telstra.

This IP belongs to America Movil.

This IP belongs to Ziggo.

We observed the IP distributing harmful document tracking tools.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

This IP belongs to Netflix.

This IP belongs to Berkshire Hathaway.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

It attempted to send phishing emails from the Mail server.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP was involved in a rapid sequence of login attempts.

This IP belongs to America Movil.

This IP belongs to Wells Fargo.

It attempted to perform a session hijacking attack on the SSH server.

Unusual patterns of behavior, such as login attempts at regular intervals or sequential patterns in the attempted passwords.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

The IP attempted to use the FTP server to distribute data recovery tools.

This IP belongs to Oracle Cloud Infrastructure.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

It was found that the IP had deployed rogue security software in our system.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

It attempted to use the FTP server to distribute terrorist propaganda.