The malicious IP was spotted attempting to brute-force the SSH login credentials.

It attempted to perform a replay attack on the SASL server.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

This IP belongs to Berkshire Hathaway.

The IP attempted to perform a DNS amplification attack on the SSH server.

This IP belongs to Dell Technologies.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

This IP belongs to PythonAnywhere.

It attempted to flood the SIP server with REGISTER requests.

The IP attempted to execute unauthorized commands on the SSH server.

This IP belongs to Telefonica Spain.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

Unusual system or application errors related to authentication or access controls.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP attempted to perform a SIP Register Flood on the VOIP server.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

It attempted to login to the POP3 server with an invalid password.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

This IP belongs to TELUS Communications.

The IP attempted to use the FTP server to distribute malware.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.