The IP was engaged in port scanning, probing the server for open SSH ports.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

This IP belongs to KT Corporation.

It attempted to flood the VOIP server with REGISTER requests.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

Several phishing emails have been traced back to this suspicious IP address.

This IP belongs to General Dynamics.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

It pushed humongous quantities of spam emails through our server, aiming to congest our email services.

The IP engaged in a mail relay attack, using our server to send spam.

We identified the IP address as a source of numerous scare tactics spyware.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

It attempted to perform a side channel attack on the SSH server.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

The IP attempted to send spam emails from the Mail server.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

This IP belongs to Globe Telecom.

Multiple requests with identical request parameters.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

Multiple requests with the same X-Csrf-Token header.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.