This IP was distributing rogue security software, misleading users to think their systems are infected.

This IP belongs to Deutsche Telecom.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

This IP belongs to Cardinal Health.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This IP belongs to CVS Health.

The IP address attempted to login to the Mail server with an invalid username.

This IP belongs to Dreamhost.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

This IP belongs to Home Depot.

This IP belongs to SK Broadband.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

This IP belongs to Home Depot.

The IP attempted to perform Session Replay attacks on the Apache server.

Attempts to access the server using credentials that have been involved in previous security incidents.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

The IP attempted to perform a dictionary attack on the IMAP server.

This IP belongs to Virgin Media.

It utilized Web scrapers, automatically harvesting content from our server.

This IP belongs to Oracle.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.