This IP attempted to disrupt our systems through the propagation of worms.

It attempted to exploit known vulnerabilities in the SSH protocol.

Unusual activity in the server's error logs.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

This IP belongs to McKesson.

It made multiple requests with the same Max-Forwards header.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

This IP belongs to American Express.

It attempted to send phishing emails from the Mail server.

This IP directed malicious network traffic to our servers with the intent to crash them.

The IP exhibited unusual patterns in the Accept-Language header.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

GET /errors.log: Shows an actor trying to access server error logs.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.

Multiple requests with the same X-UIDH header.

The IP sent malformed VOIP requests, potentially indicating an attempt to crash the server.

It sent Asterisk requests to non-existent extensions.

This IP has been observed spreading mobile malware, targeting our company application users.

The IP has initiated several exploits, specifically for software vulnerabilities.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

The IP attempted to use the FTP server to distribute data recovery tools.