It attempted to perform a Land attack on the SSH server.

The IP made multiple requests with the same Proxy-Authorization header.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

This IP belongs to Home Depot.

This IP belongs to TELUS Communications.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

It attempted to change file permissions on the FTP server.

It actively sought to exploit unpatched software within our server applications.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

It made various efforts to insert spyware to monitor SSH communications covertly.

The IP attempted to mark emails as read on the IMAP server without authorization.

This IP belongs to Swisscom.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

The IP attempted to use the FTP server to distribute steganography tools.

The IP showed unusual patterns in session IDs.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

It attempted to delete emails from the POP3 server without authorization.

This IP belongs to Freddie Mac.

The IP attempted to perform a timing attack on the SSH server.

This IP belongs to State Farm Insurance.