It made multiple requests from user agents claiming to be bots.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The IP made multiple requests to the server's robots.txt file.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

This IP belongs to Intel.

The IP attempted to use the FTP server to distribute anonymizing tools.

A dangerous data surveillance spyware was tied back to this IP.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP belongs to Humana.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It attempted to delete files from the SSH server.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

It attempted to perform a VOIP Hopper scan on the Asterisk server.

This IP belongs to Zayo Bandwidth.

The IP attempted to login to the POP3 server with an invalid username.