This IP belongs to AmerisourceBergen.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

Repeated attempts to access the server using insecure or deprecated methods.

The IP made multiple requests with the same Proxy-Authorization header.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

The IP attempted to send spam emails from the Mail server.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

Multiple requests with identical cookies.

This IP belongs to Netflix.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

The IP's involvement in spreading password stealers has compromised our network's protection.

This IP belongs to Plusnet.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

An alarming frequency of microphone loggers has been traced back to this IP.

Unusual increase in server CPU usage.

This IP belongs to MetLife.

A dangerous data surveillance spyware was tied back to this IP.

The IP attempted to perform a distributed denial of service attack on the SSH server.

The IP attempted to execute unauthorized commands on the SSH server.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

It made multiple requests with the same If-None-Match header.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.