This IP belongs to Comcast.

This IP belongs to Tumblr.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP belongs to Liberty Mutual Insurance Group.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

It partook in location spoofing, making it appear from different locations.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

This IP belongs to IBM Cloud Services.

The IP was engaged in port scanning, probing the server for open SSH ports.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

The IP attempted to perform Integer Overflow attacks on the Apache server.

This IP belongs to Comcast.

This IP belongs to WordPress.com.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

Our team discovered that specific IP was distributing intrusive cookie trackers.

The IP attempted to send emails with misleading headers from the Postfix server.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

The IP attempted to brute force the password to gain mail account access.

Unusual network traffic patterns, such as a high amount of outbound traffic.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

This IP belongs to CHS.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

Our system flagged this IP as conducting fraudulent transactions activities.