The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

It attempted to perform a replay attack on the SASL server.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

This IP belongs to MetLife.

Our data indicates this IP has performed data breaches by launching phishing attacks.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

This IP belongs to Allstate.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

The IP attempted to perform a replay attack on the IMAP server.

The IP made multiple requests with identical Accept-Encoding headers.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

The said IP was the source of several rootkit deployment attempts.

The IP attempted to perform Integer Overflow attacks on the Apache server.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

A string of malicious e-commerce apps installations were linked to this IP.

It launched a botnet to infiltrate our Apache-DDoS service.

This IP belongs to Microsoft.

This IP belongs to Home Depot.