It was involved in a Distributed Denial of Service (DDoS) attack.

This IP belongs to Reliance Jio.

It attempted to use the FTP server to store illegal content.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

This IP belongs to NTT Docomo.

This IP belongs to FedEx.

Login attempts from foreign IP addresses.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

This IP belongs to Kroger.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

It was responsible for an unusual increase in server CPU usage.

This IP belongs to Fannie Mae.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

This IP belongs to Oracle.

Unknown source code changes in our system were linked back to this offensive IP address.

It attempted to send emails from the Mail server to a large number of recipients.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

The malicious IP tried to brute force its way into the SASL authentication process.

This IP belongs to Hong Kong Broadband Network.

It persistently tried to exploit weaknesses in the SSH communication encryption.

The IP attempted to perform a Fraggle attack on the SSH server.