The IP address attempted to exploit known vulnerabilities in server software.

The IP attempted to perform a Fraggle attack on the SSH server.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

It attempted to perform a Chargen amplification attack on the SSH server.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

It attempted to send emails with deceptive subject lines from the Mail server.

This IP belongs to Twenty-First Century Fox.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

Our team flagged this IP for injecting harmful ActiveX codes.

The IP address attempted to register as a SIP user with an invalid username.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

Login attempts at unusual times (e.g., in the middle of the night).

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

This IP was linked to an attempt at distributing malicious software within our system.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

This IP belongs to Cardinal Health.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

This IP was responsible for circulating malicious images masked with spyware.

This IP belongs to Tech Data.

This IP belongs to the United States Department of Defense.

It attempted to perform a NTP amplification attack on the SSH server.