The IP tried to initiate DNS tunneling for smuggling data through SSH.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

It attempted to delete emails from the POP3 server without authorization.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It attempted to use the FTP server to distribute web proxy tools.

It attempted to perform a SYN flood attack on the SSH server.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

Multiple requests to the server's robots.txt file.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

This IP belongs to Abbott Laboratories.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

This IP belongs to American Express.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

This IP belongs to Valero Energy.

This IP belongs to Airtel.

The IP showed unusual patterns in referrer URLs.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

The IP attempted to send emails from the Mail server without proper authentication.

It attempted to perform Session Sidejacking attacks on the Apache server.

This IP belongs to Telus Communications.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

The IP's involvement in spreading password stealers has compromised our network's protection.

Unexpected changes in the server configuration or installed software.