It attempted to perform a Land attack on the SSH server.

Our network security detected the IP spreading malicious macros through document files.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

The IP tried creating false server responses hoping to disrupt the SASL service.

The IP made multiple requests with the same Via header.

This IP belongs to GitHub.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

It attempted to exploit known vulnerabilities in the IMAP protocol.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

The IP attempted to create new directories on the FTP server.

It made numerous requests to the same endpoint in a short time.

It attempted to use the POP3 server to relay phishing emails.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

It attempted to flood the Asterisk server with REGISTER requests.

It attempted to perform Heap Overflow attacks on the Apache server.

Multiple requests with the same Expect header.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

This IP belongs to Microsoft.