This IP belongs to Virgin Media.

The IP attempted to perform Symlink attacks on the Apache server.

This IP belongs to Cloudfare.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

This IP belongs to Morgan Stanley.

It attempted to delete emails from the POP3 server without authorization.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

The IP attempted to use the FTP server to distribute hacking tutorials.

Our team discovered that specific IP was distributing intrusive cookie trackers.

This IP belongs to Target.

The IP was involved in a phishing attack, creating a fake webpage to deceive users into providing their sensitive personal or financial information.

This particular IP has been used in advanced persistent threats against our servers.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

The IP attempted to perform a phishing attack using the SASL server.

This IP belongs to MTS (Mobile TeleSystems).

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

Multiple unsuccessful attempts to escalate privileges or access root account.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

This IP belongs to KDDI.

This IP belongs to IBM.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.