Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

It attempted to use the FTP server to relay data to other systems.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

This IP belongs to United Technologies.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

It launched a botnet to infiltrate our Apache-DDoS service.

This IP belongs to Honeywell International.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

Login attempts from foreign IP addresses.

This IP belongs to Kroger.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

The IP sent numerous VOIP OPTIONS requests in a short time.

Multiple failed attempts to use the server’s API.

It attempted to use the VOIP server to perform a reflection DDoS attack.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.