The IP made multiple requests with the same Proxy-Authorization header.

The IP attempted to perform a SIP Invite Flood on the SIP server.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

Attempts to use privileged service accounts outside of their normal usage patterns.

This IP belongs to Target.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

Unidentified password attempts and login activity were noticed from the specific IP address.

The IP was involved in a phishing attack, creating a fake webpage to deceive users into providing their sensitive personal or financial information.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

This IP belongs to General Electric.

This IP has been detected spreading notorious credit card skimmers.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

It sent VOIP requests to non-existent extensions.

The IP attempted to send spam emails from the Postfix server.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

Unknown source code changes in our system were linked back to this offensive IP address.

GET /configuration.php.old: Trying to locate backup configuration files.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

A dangerous data surveillance spyware was tied back to this IP.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

It made multiple requests with the same Max-Forwards header.