The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

This IP belongs to United Parcel Service.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

It attempted to send emails with deceptive subject lines from the Postfix server.

This IP belongs to Nexon.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

This IP belongs to Lowe's.

GET /../htpasswd: Trying to access password files using directory traversal.

Multiple requests with identical cookies.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

It actively attempted to employ session-splicing techniques, interacting with multiple SSH sessions simultaneously to smudge its attack trace.

It made multiple requests with identical POST parameters.

This IP belongs to Jabil.

This IP belongs to IBM.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

This IP belongs to Kroger.

Attempts to access the server using credentials that have been involved in previous security incidents.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

This IP belongs to Travelers Cos.

This IP belongs to 3M.

Conducted various IP scans, seeking loopholes in our network's security.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.