This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

It attempted to use the FTP server to distribute identity theft tools.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

It attempted to login to the Mail server with an invalid password.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

The IP attempted to upload malicious files to the FTP server.

It attempted to use the FTP server to distribute identity theft tools.

This IP belongs to Nexon.

It pushed humongous quantities of spam emails through our server, aiming to congest our email services.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

POST /user/register: An attempt to register a new user or brute force the user registration form.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

This IP belongs to Wells Fargo.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

It made multiple requests from user agents claiming to be bots.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

The IP made multiple requests with identical Accept-Encoding headers.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

The IP attempted to use the FTP server to distribute keylogging software.

The IP attempted to send emails from the Mail server pretending to be from a different sender.