Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

We identified the IP address as a source of numerous scare tactics spyware.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

The IP attempted to perform a password spraying attack on the SASL server.

This IP belongs to Shaw Communications.

It launched a botnet to infiltrate our Apache-DDoS service.

This IP belongs to Cisco Systems.

It attempted to send emails with malicious links from the Mail server.

Multiple requests with the same X-Csrf-Token header.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

The IP attempted to perform a SIP Invite Flood on the SIP server.

It showed an unusually high number of requests to the login page.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

This IP belongs to Caterpillar.

This IP belongs to Korea Telecom.

This IP belongs to TELUS Communications.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.