This IP belongs to Plusnet.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

The IP attempted to use the FTP server to distribute secure deletion tools.

This IP belongs to American Express.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

This IP belongs to TELUS Communications.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

It attempted to perform Race Condition attacks on the Apache server.

This particular IP attempted to exploit vulnerabilities in our web applications.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

The IP tried to carry out illegal 'HTTP Request Smuggling' to fool the Apache server.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

This IP belongs to ConocoPhillips.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

It attempted to perform a NTP amplification attack on the SSH server.

This IP belongs to Cisco Systems.

This IP belongs to TJX.

This IP belongs to Comcast.

The IP was flagged for attempting dictionary attacks on our user accounts.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP had been flagged for initiating SYN flood attacks on our servers.

This IP belongs to Sony Network Communications.

It attempted to send phishing emails from the Postfix server.