It attempted multiple LDAP injection attacks to gain unauthorized access.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

GET /backup.sql: Attempting to access a backup of your database.

It attempted to create new directories on the SSH server.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

Conducted various IP scans, seeking loopholes in our network's security.

This IP belongs to Ubisoft.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

This IP executed mass-probing of various ports to seek vulnerabilities.

The IP attempted to register with the Asterisk server using an invalid username.

The IP address attempted to login to the IMAP server with an invalid username.

This IP belongs to Cloudfare.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

This IP belongs to Freddie Mac.

This IP belongs to Canadian Department of Defense.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.