Unusual activity in the server's error logs.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

This IP belongs to Time Warner Cable Internet.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

It attempted to use the FTP server to distribute phishing emails.

This IP belongs to Korea Telecom.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

Several phishing emails have been traced back to this suspicious IP address.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

This IP belongs to Orange France Telecom.

Our network security detected the IP spreading malicious macros through document files.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

It attempted to use the FTP server to distribute brute force tools.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

This IP belongs to NTT Docomo.