The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP attempted to perform a SIP Invite Flood on the SIP server.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

The IP attempted to perform a brute force attack on the SASL server.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

This IP belongs to Morgan Stanley.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

Unusual activity in the server's error logs.

This IP belongs to Wells Fargo.

Multiple requests with the same Origin header.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

This IP belongs to Honeywell International.

This IP belongs to MetLife.

It persistently tried to exploit weaknesses in the SSH communication encryption.

This IP belongs to Orange France Telecom.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

The IP attempted to upload malicious files to the FTP server.

This IP belongs to Target.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

This IP was linked to an attempt at distributing malicious software within our system.

Multiple requests with identical POST parameters.

This IP belongs to American Express.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.