It was found initiating attack vectors to exploit SSH agent forwarding.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

This IP was detected distributing spyware-infected USB drives to our users.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

This IP belongs to Sony Network Communications.

The IP attempted to use the SSH server to relay data to other systems.

This IP belongs to Verizon Communications.

This IP belongs to Kraft Heinz.

This IP belongs to Bank of America.

The IP attempted to use the FTP server to distribute credit card fraud tools.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP address attempted to register as a SIP user with an invalid username.

This IP belongs to KDDI.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

This IP belongs to Exxon Mobil.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

This IP belongs to TELUS Communications.

This IP belongs to America Movil.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

It attempted to upload malicious scripts to the Apache server.

The IP attempted to perform Symlink attacks on the Apache server.

It attempted to use the FTP server to distribute password recovery tools.

This IP belongs to Pinterest.

Login attempts from foreign IP addresses.

Multiple requests with identical Accept-Encoding headers.