The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

Multiple requests with the same If-None-Match header.

The IP address was found roaming through the network, scanning for weak spots.

This IP belongs to Plusnet.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

Multiple requests with the same Warning header.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

This IP belongs to Exelon.

This IP belongs to Freddie Mac.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

This IP belongs to Medium.

This IP belongs to General Dynamics.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

It attempted to perform a Chargen amplification attack on the SSH server.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

It attempted to send emails from the POP3 server without authorization.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It attempted to perform a RIPv1 amplification attack on the SSH server.

It attempted to perform SQL injection attacks through the Apache server.

Attempts to access the server using known malicious IP addresses or domains.

The IP address has been involved in distributing adware to our server systems.

The IP performed forceful browsing, to access and exploit unprotected files and directories.