The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

It attempted to create new directories on the SSH server.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

The IP address made multiple requests with identical request parameters.

This IP belongs to Walgreens Boots Alliance.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

This IP has been marked as the origin of numerous SQL injection attacks.

This IP belongs to NetEase.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

This IP belongs to T-Mobile.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

It attempted to make unauthorized calls using the Asterisk server.

Multiple failed login attempts using different usernames.

It attempted to use the Postfix server to relay spam to other servers.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

This IP belongs to Fannie Mae.

Multiple requests with the same Max-Forwards header.

This IP address from an unusual location has successfully installed malware on our servers.

The IP attempted to download emails from the POP3 server without authorization.

The IP address attempted delivering malicious packets to disrupt the system's operation.

It attempted to take advantage of misconfigurations in the Apache server.

This IP belongs to GitHub.

The IP attempted logins at unusual times.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

The IP attempted to perform SOAP Injection attacks on the Apache server.