This IP was responsible for circulating malicious images masked with spyware.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

The IP was involved in a phishing attack, creating a fake webpage to deceive users into providing their sensitive personal or financial information.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

A large number of requests from a single user agent, suggesting an automated process.

The IP attempted to download sensitive files from the Apache server.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

It attempted to use the FTP server to distribute pirated software.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

The IP made multiple requests using uncommon HTTP methods.

The IP attempted a Rootkit installation to gain root access and control server activity.

The IP attempted to list the contents of directories that it should not have access to.

The IP attempted to perform a SIP Register Flood on the VOIP server.