This IP belongs to Ubisoft.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

It attempted to use the FTP server to distribute brute force tools.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

The malicious IP tried to brute force its way into the SASL authentication process.

It made multiple requests from user agents claiming to be bots.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

This IP belongs to UnitedHealth Group.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

This IP belongs to Rogers Cable.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

Multiple requests with the same Warning header.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

Multiple requests with the same Proxy-Connection header.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

It attempted to perform a side channel attack on the SSH server.