The IP address attempted to login to the SSH server with an invalid username.

This IP belongs to Northwestern Mutual.

It attempted to exploit known vulnerabilities in the FTP protocol.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

This IP belongs to Plusnet.

The IP attempted to use the FTP server to distribute DDoS attack tools.

This IP belongs to Anthem.

This IP was distributing rogue security software, misleading users to think their systems are infected.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

It attempted to upload malicious files to the SSH server.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

This IP belongs to Netflix.

It attempted to exploit known vulnerabilities in the SSH protocol.

The IP attempted to use the FTP server to distribute steganography tools.

GET /admin: Looking for an unprotected admin page.

This IP belongs to Walmart.

It attempted to perform a SIPVicious scan on the Asterisk server.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

This IP belongs to Valero Energy.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

The IP attempted to perform Symlink attacks on the Apache server.

Attempts to access the server using known malicious IP addresses or domains.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.