It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

It attempted to delete emails from the POP3 server without authorization.

This malicious IP was seen sending unusually high volumes of requests, a sign of potential automated bot activity.

This IP blocked legitimate users by performing IP hijacking.

A majority of our user base received phishing emails originated from this particular IP address.

It showed an unusually high number of requests to the login page.

It attempted to perform a Sentinels amplification attack on the SSH server.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

It showed unusual activity in the server's error logs.

It attempted to perform a man-in-the-middle attack on the IMAP server.

This IP belongs to KT Corporation.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

It attempted to perform a dictionary attack on the SASL server.

The IP attempted to use the FTP server to distribute DDoS attack tools.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

It attempted to delete emails from the POP3 server without authorization.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

This particular IP tried to perform an unauthorized system configuration change.

This IP attempted to distribute malicious Javascript files.

The IP attempted to download emails from the POP3 server without authorization.

It attempted to perform a NTP amplification attack on the SSH server.