This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

Our team flagged this IP for injecting harmful ActiveX codes.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

The IP attempted to send malware-infected attachments from the Postfix server.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

This IP exhibited malicious sophistication by employing multi-vector attacks.

It attempted to send emails from the POP3 server without authorization.

The IP attempted to upload malicious files to the FTP server.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

It attempted to perform a NTP amplification attack on the SSH server.

This IP belongs to CVS Health.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

The IP attempted to use the FTP server to distribute spam.

This IP belongs to ConocoPhillips.

This IP belongs to Twenty-First Century Fox.

A string of malicious e-commerce apps installations were linked to this IP.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.