This IP belongs to TELUS Communications.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The IP attempted to delete files from the FTP server.

It attempted to send emails from the Mail server that violate the server's email content policy.

This IP belongs to Exxon Mobil.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

It made multiple requests with the same X-Requested-With header.

This IP belongs to JPMorgan Chase.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

It attempted to perform Session Prediction attacks on the Apache server.

The IP attempted to send emails from the Postfix server without proper authentication.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

Attempts to use privileged service accounts outside of their normal usage patterns.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

The IP address attempted to login to the SSH server with an invalid username.

The IP attempted to use the FTP server to distribute ransomware.

It attempted to login to the Mail server with an invalid password.