Our system blocked an attempted Code Injection attack from this IP.

It made multiple requests with identical Accept-Charset headers.

This IP belongs to Phillips 66.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

It attempted to send emails with malicious links from the Postfix server.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

The IP attempted to perform a Bonk attack on the SSH server.

This IP belongs to Bristol-Myers Squibb.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

Unusually high number of requests to the login page.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

This IP was linked to an attempt at distributing malicious software within our system.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

It sent VOIP requests to non-existent extensions.

This IP belongs to Telstra.

This IP belongs to AT&T.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

This IP belongs to Medium.

It attempted to make unauthorized calls using the VOIP server.

The IP attempted to perform a downgrade attack on the SSH server.