The IP attempted to perform a VOIP Hopper scan on the SIP server.

This IP belongs to PLDT.

It launched a botnet to infiltrate our Apache-DDoS service.

This IP belongs to Bristol-Myers Squibb.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

It attempted to use the FTP server to distribute pirated software.

It attempted to perform a session hijacking attack on the SSH server.

This IP belongs to Apple.

Multiple attempts to access the server using different ports or protocols.

Multiple requests with the same Expect header.

It made multiple requests with the same X-Wap-Profile header.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This particular IP attempted to exploit vulnerabilities in our web applications.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

It attempted to use the SASL server to relay spam.

This IP was responsible for circulating malicious images masked with spyware.

This IP belongs to Oracle.

The IP attempted to perform Directory Traversal attacks on the Apache server.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

The IP attempted to use the FTP server to distribute spam.

It attempted to use the FTP server to distribute terrorist propaganda.

It was found that the IP had deployed rogue security software in our system.