It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

The IP was recorded making persistent attempts to crack our encryption.

Attempts to use automated scripts or tools for password cracking.

This IP belongs to SingTel.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

This IP belongs to General Motors.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The said IP was the source of several rootkit deployment attempts.

Repeated attempts to exploit known vulnerabilities in server software.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

The IP made multiple requests with the same Proxy-Connection header.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

It attempted to perform a SIP Invite Flood on the VOIP server.

Attempts to access the server using credentials that have been involved in previous security incidents.

The IP showed unusual patterns in referrer URLs.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

This IP belongs to Shaw Communications.

This IP belongs to Verizon Communications.

The IP attempted to use the FTP server to distribute child pornography.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP was involved in a DDoS attack, sending massive amounts of traffic to overwhelm a server and disrupt its normal functioning.

This IP belongs to Deutsche Telecom.

It was found initiating attack vectors to exploit SSH agent forwarding.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.