It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

It attempted to use the SSH server as a proxy for other malicious activities.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

GET /../htpasswd: Trying to access password files using directory traversal.

This IP belongs to Deere.

This IP belongs to WordPress.com.

Multiple unsuccessful attempts to escalate privileges or access root account.

The IP attempted to change file permissions on the SSH server.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

The IP attempted to mark emails as read on the POP3 server without authorization.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

This IP belongs to Swisscom.

GET /backup.sql: Attempting to access a backup of your database.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP attempted to register as an Asterisk user with no password.

It attempted to use the FTP server to distribute phishing emails.

This IP belongs to Apple.

Our system flagged this IP as conducting fraudulent transactions activities.

Unknown source code changes in our system were linked back to this offensive IP address.

Attempts to access the server using unusual HTTP methods or request types.

This IP belongs to AT&T.