The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

It attempted to use the SIP server to perform a reflection DDoS attack.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

This IP was traced back to several attempts to access domain admin credentials.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

It was involved in a Distributed Denial of Service (DDoS) attack.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

Multiple requests with the same Max-Forwards header.

It attempted to send emails with deceptive subject lines from the Postfix server.

The IP was engaged in port scanning, probing the server for open SSH ports.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

This IP belongs to Jabil.

The IP engaged in a mail relay attack, using our server to send spam.

This IP belongs to AT&T.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

It made multiple requests with the same Max-Forwards header.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

Multiple failed login attempts from the same IP address in a short span of time.

The IP made multiple requests with the same If-Range header.

The IP showed unusual patterns in referrer URLs.