The IP had been flagged for initiating SYN flood attacks on our servers.

Unusual command line activities that are not typical for the server environment.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

Multiple HTTP 401 Status Codes: This could indicate someone is repeatedly attempting to access resources that require valid credentials, possibly attempting to brute-force their way in.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

It attempted to flood the VOIP server with REGISTER requests.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

The IP has initiated several exploits, specifically for software vulnerabilities.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP has been marked as the origin of numerous SQL injection attacks.

This IP belongs to Goldman Sachs Group.

Incidents of privacy-invasive software floating in our network were linked to this IP.

POST /wp-admin/admin-ajax.php: The Actor may be trying to exploit some vulnerable WordPress theme or plugin.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

This IP has been observed spreading mobile malware, targeting our company application users.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

This IP was found responsible for a session hijacking attempt on our network.

This IP belongs to Allstate.

The IP attempted to perform Session Hijacking attacks on the Apache server.

This IP belongs to Deutsche Telekom AG.

This IP belongs to General Electric.