The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

The IP was involved in attempts of defacing the Apache server website.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

It partook in location spoofing, making it appear from different locations.

It attempted to flood the Asterisk server with REGISTER requests.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

The IP attempted to perform a Ping of Death attack on the SSH server.

It engaged in a click fraud operation using our server’s communication channels.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

This IP belongs to KT Corporation.

This IP belongs to Slack.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

This IP belongs to General Motors.

It attempted to send phishing emails from the Postfix server.

This IP belongs to Northwestern Mutual.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

It attempted to perform WSDL Enumeration attacks on the Apache server.

The IP address attempted to exploit known vulnerabilities in server software.

The IP made multiple unsuccessful login attempts in a short period of time.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

This IP belongs to Freddie Mac.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

This IP belongs to Allstate.