It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

It attempted to perform a side channel attack on the SSH server.

Multiple failed login attempts from the same IP address in a short span of time.

It made numerous requests to the same endpoint in a short time.

This IP was implicated in attempts to inject ransomware into our systems.

It showed unusual patterns in the sequence of requests.

Multiple requests with the same If-Range header.

A dangerous data surveillance spyware was tied back to this IP.

Multiple requests with the same X-Wap-Profile header.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

The IP address attempted to login to the FTP server with an invalid username.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

The IP attempted to send malware-infected attachments from the Mail server.

It attempted to use the SSH server as a proxy for other malicious activities.

It attempted to send emails from the Postfix server that violate the server's email content policy.

GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

This IP belongs to United Parcel Service.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP attempted to use the FTP server to distribute secure deletion tools.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

The IP address attempted to exploit known vulnerabilities in server software.

This IP belongs to Tech Data.

Repeated attempts to access the server using insecure or deprecated methods.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.