This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to Virgin Media.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

This IP belongs to Procter & Gamble.

Incriminating activities involving the distribution of trojan horses were linked to this IP address.

It attempted to change file permissions on the FTP server.

The IP attempted to login to the POP3 server with an invalid username.

The IP attempted to brute force the password to gain mail account access.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

POST /upload.php: An attempt to upload a possibly malicious file.

Participated in a botnet attack to overwhelm our server’s resources.

This IP belongs to United Technologies.

This IP was implicated in attempts to inject ransomware into our systems.

This IP belongs to Phillips 66.

This IP belongs to AmerisourceBergen.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

The IP attempted to perform a SIP Register Flood on the VOIP server.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

It attempted to send emails from the Postfix server that violate the server's usage policy.

It utilized Web scrapers, automatically harvesting content from our server.

The IP attempted to perform a timing attack on the SSH server.

This IP belongs to Oracle.

It attempted to make unauthorized calls using the Asterisk server.