The IP attempted to tamper with our Ad network, conducting fraudulent activities.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

It attempted to flood the VOIP server with REGISTER requests.

It attempted to download sensitive files from the FTP server.

The IP attempted to perform Integer Overflow attacks on the Apache server.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

This IP belongs to Xbox Live.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

The IP address initiated attacks using DDoS, impacting our server response times.

It attempted to send emails from the Postfix server to a large number of recipients.

The IP tried to crack S/MIME encryption for accessing secured email contents.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

The IP attempted to perform a timing attack on the SSH server.

Our team flagged this IP for injecting harmful ActiveX codes.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

Multiple requests to the password reset page.

A sudden spike in bandwidth usage, which can indicate a brute force attack.