Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

The IP attempted to use the FTP server to distribute spam.

Repeated attempts to alter or delete log files to cover tracks.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

GET /internal/: Browsing an internal directory.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

It was flagged that this IP had been used in conducting method tampering on our servers.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

This IP belongs to Sky Broadband.

It attempted to login to the SSH server with an invalid password.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

This particular IP attempted to exploit vulnerabilities in our web applications.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

This IP belongs to Valero Energy.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

This IP belongs to Prudential Financial.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

This IP belongs to China Mobile.

This IP belongs to FedEx.