It attempted to perform a NTP amplification attack on the SSH server.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

This IP belongs to Procter & Gamble.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

This IP belongs to Cardinal Health.

This IP belongs to United Continental Holdings.

The IP has been traced back to system monitors, aiming to watch and record user activity.

It attempted to make unauthorized calls using the VOIP server.

It attempted logins using outdated protocols.

Attempts to use automated scripts or tools for password cracking.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

It attempted to perform a dictionary attack on the SASL server.

The IP attempted to login to the Postfix server with an invalid username.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

Repeated Unique 404 Errors: Logs revealing a steady stream of unique 404 errors could suggest a DDoS attack aiming to exhaust storage resources.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.

The IP was flagged for attempting dictionary attacks on our user accounts.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.