This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

This IP belongs to Deutsche Telekom AG.

The IP address has been linked to the creation of artificial traffic to crash our website.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

This IP belongs to JPMorgan Chase.

The IP address has been linked to the creation of artificial traffic to crash our website.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

An alarming frequency of microphone loggers has been traced back to this IP.

This IP belongs to American Express.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.

Multiple failed attempts to use the server’s API.

Unusual network traffic patterns, such as a high amount of outbound traffic.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

This IP belongs to American Express.

This IP has been detected spreading notorious credit card skimmers.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

The IP address attempted to register as a SIP user with an invalid username.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

The IP attempted to perform Directory Traversal attacks on the Apache server.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

Unusual patterns in user agent strings.

Our firewall recorded intrusion attempts originating from this suspicious IP.