It attempted to use the FTP server to distribute password recovery tools.

This IP was detected initiating zero-day exploit attacks on our system.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

Repeated attempts to access rarely used or hidden services on the server.

This malicious IP was reported for trying to inject malicious scripts into the VoIP server, potentially to disrupt its operation or steal data.

Multiple requests with the same Max-Forwards header.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

It was involved in a Distributed Denial of Service (DDoS) attack.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

It attempted to perform Buffer Overflow attacks on the Apache server.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

It attempted to use the FTP server to distribute terrorist propaganda.

It sent VOIP requests to non-existent extensions.

This IP belongs to Bank of America.

It was involved in a Distributed Denial of Service (DDoS) attack.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

Unusual increase in network bandwidth usage.

This IP blocked legitimate users by performing IP hijacking.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.