It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

This IP belongs to Tech Data.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

This IP belongs to Nintendo.

The IP attempted to perform a distributed denial of service attack on the SSH server.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

The IP attempted to use the POP3 server to distribute malware.

It attempted to use the FTP server to distribute password cracking tools.

This IP belongs to Rogers Cable.

Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

The IP attempted to use the FTP server to distribute VPN tools.

This IP belongs to New York Life Insurance.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

It attempted to flood the SIP server with REGISTER requests.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

A string of malicious e-commerce apps installations were linked to this IP.

This IP belongs to Medium.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

Unusual patterns in referrer URLs.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

It attempted to perform a man-in-the-middle attack on the IMAP server.

The IP attempted to download emails from the POP3 server without authorization.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.