The IP attempted to perform a NetBIOS amplification attack on the SSH server.

The IP address was found roaming through the network, scanning for weak spots.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

Multiple failed attempts to use the server’s API.

The IP attempted to perform a SNMP amplification attack on the SSH server.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

This IP belongs to Microsoft.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

It initiated requests to non-existent endpoints.

It made multiple requests with the same Referer header.

This IP belongs to CVS Health.

It attempted to perform a SIPVicious scan on the Asterisk server.

This IP belongs to Dell Technologies.

This IP belongs to the United States Department of Defense.

The IP attempted to perform a SNMP amplification attack on the SSH server.

This IP belongs to AmerisourceBergen.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

It tried to execute dictionary attacks on our Mail service causing potential delays.

The IP attempted to send malware-infected attachments from the Postfix server.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

It was discovered illicitly scanning the server for potential vulnerabilities.

This IP belongs to OVH.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

It attempted to use the SASL server to distribute malware.