The IP attempted to perform a Bonk attack on the SSH server.

This IP belongs to McKesson.

This IP directed malicious network traffic to our servers with the intent to crash them.

This IP belongs to Baidu.

This IP has been flagged for attempting to escalate privileges in our network.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

This IP belongs to Costco Wholesale.

Repeated failed attempts to perform actions that require higher privileges.

The IP attempted to download sensitive files from the SSH server.

Multiple unsuccessful attempts to escalate privileges or access root account.

It attempted to perform Clickjacking attacks on the Apache server.

Several cross-site scripting attacks were traced back to this IP.

The IP was detected while sending out malicious spyware-infected emails.

This IP belongs to IBM.

The IP attempted to use the SSH server to relay data to other systems.

It attempted to perform a SIPVicious scan on the SIP server.

Multiple requests with the same TE (Transfer Encoding) header.

It attempted to use the FTP server to distribute virus creation tools.

It attempted to change file permissions on the FTP server.

This IP belongs to Microsoft Azure.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

The IP made multiple requests with the same If-Range header.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.