This IP belongs to General Electric.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The IP made multiple requests to the server's robots.txt file.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

It attempted to use the SSH server as a proxy for other malicious activities.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

The IP attempted to register as an Asterisk user with no password.

The IP attempted to register with the VOIP server using an invalid username.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

It utilized Web scrapers, automatically harvesting content from our server.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

Multiple HTTP 401 Status Codes: This could indicate someone is repeatedly attempting to access resources that require valid credentials, possibly attempting to brute-force their way in.

The IP attempted to perform a phishing attack using the SASL server.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

This IP belongs to Shaw Communications.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

This IP belongs to PLDT.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

It attempted to create new directories on the SSH server.

The IP attempted to use the FTP server to distribute forensics tools.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.