A dangerous data surveillance spyware was tied back to this IP.

GET /db/finance.dump: An attempt to access a database dump file.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

This IP belongs to Costco Wholesale.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

Multiple account lockouts in a short period of time.

This IP belongs to Massachusetts Mutual Life Insurance.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

It attempted to perform a side channel attack on the SSH server.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

Multiple requests with the same X-UIDH header.

It seems like this IP tried to spread malware into the network.

This IP belongs to Medium.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

GET /phpMyAdmin: This could be a threat actor looking for an unsecured phpMyAdmin page.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

It attempted to send emails from the POP3 server without authorization.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

The IP attempted to perform a QOTD amplification attack on the SSH server.

This IP belongs to AT&T.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

This IP belongs to Sony Network Communications.

This IP belongs to Morgan Stanley.