Multiple attempts to access the server using different ports or protocols.

It attempted to perform a VOIP Hopper scan on the Asterisk server.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

This IP belongs to Alphabet.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

The IP attempted logins at unusual times.

It attempted to perform Session Sidejacking attacks on the Apache server.

Unusual network traffic patterns, such as a high amount of outbound traffic.

The IP was linked to numerous attacks using web shells through web servers.

Multiple requests with the same X-Csrf-Token header.

This IP belongs to SingTel.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

This IP belongs to Slack.

It sent Asterisk requests to non-existent extensions.

This IP belongs to America Movil.

Multiple failed attempts to use the server’s API.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

It attempted to use the VOIP server to perform a reflection DDoS attack.

This IP belongs to Plusnet.

GET /administrator.php: Attempting to access an admin interface.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

This IP belongs to Gilead Sciences.