This IP belongs to Walgreens Boots Alliance.

This IP belongs to Cigna.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

This IP belongs to TELUS Communications.

It partook in whaling attacks, specifically targeting high-profile users within our system.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

This IP executed mass-probing of various ports to seek vulnerabilities.

The IP attempted to upload malicious files to the FTP server.

This IP belongs to ConocoPhillips.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

GET /../htpasswd: Trying to access password files using directory traversal.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

The IP attempted to use the FTP server to distribute secure deletion tools.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

The IP attempted to perform a timing attack on the SSH server.

The IP attempted to perform a credential stuffing attack on the POP3 server.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

Attempts to access the server using stolen or leaked credentials.

This IP belongs to PythonAnywhere.