This IP was detected initiating zero-day exploit attacks on our system.

The IP attempted to perform a Nestea attack on the SSH server.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

The IP attempted to register as an Asterisk user with no password.

It made multiple requests with the same Expect header.

This IP belongs to Verizon.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

This IP belongs to Morgan Stanley.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

This IP belongs to Procter & Gamble.

Multiple requests to the same endpoint in a short period of time.

Repeated connections to the server from unknown or suspicious IP addresses.

This IP belongs to Prudential Financial.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

It actively sought to exploit unpatched software within our server applications.

This IP belongs to AT&T.

It sent Asterisk requests to non-existent extensions.

This IP belongs to UnitedHealth Group.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It attempted to use the FTP server to distribute traffic monitoring tools.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

This IP belongs to DuPont de Nemours.