This IP has been identified as running a botnet targeting our server systems with ransomware.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

The IP was involved in a DDoS attack, sending massive amounts of traffic to overwhelm a server and disrupt its normal functioning.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

Identification of Known Vulnerabilities: Attempts to exploit known vulnerabilities related to your server application.

It attempted to perform a SIP Register Flood on the SIP server.

The IP address attempted delivering malicious packets to disrupt the system's operation.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

This IP belongs to KDDI.

The IP attempted to login to the Postfix server with an invalid username.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

The IP showed unusual patterns in referrer URLs.

This IP attempted to disrupt our systems through the propagation of worms.

The IP attempted to delete directories on the SSH server.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

This IP belongs to Citigroup.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

The IP attempted to use the FTP server to distribute DDoS attack tools.