The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP attempted to perform Session Replay attacks on the Apache server.

The IP's involvement in spreading password stealers has compromised our network's protection.

This IP belongs to Telkom SA.

Login attempts at unusual times (e.g., in the middle of the night).

This IP belongs to Fannie Mae.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

It attempted to delete emails from the IMAP server without authorization.

It was found that the IP had deployed rogue security software in our system.

Multiple requests with the same Proxy-Authorization header.

It attempted to login to the FTP server with an invalid password.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

A majority of our user base received phishing emails originated from this particular IP address.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

The IP attempted to use the FTP server to distribute child pornography.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

It attempted to flood the Asterisk server with REGISTER requests.

It attempted to use the FTP server to distribute hacking tools.

The IP address attempted to login to the SSH server with an invalid username.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

GET /../htpasswd: Trying to access password files using directory traversal.

The IP attempted to download emails from the IMAP server without authorization.