The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

This IP belongs to Bristol-Myers Squibb.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

The IP was caught attempting to execute heap overflow attacks.

Attempts to use automated scripts or tools for password cracking.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

It attempted to exploit known vulnerabilities in the SSH protocol.

This IP belongs to CHS.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It attempted to perform a Steam protocol amplification attack on the SSH server.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

Multiple requests with the same Referer header.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

It attempted to list the contents of directories that it should not have access to.

It sent VOIP requests to non-existent extensions.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

Login attempts from foreign IP addresses.

This IP belongs to Boeing.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

It attempted to use the FTP server to distribute web proxy tools.