The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

It attempted to perform Heap Overflow attacks on the Apache server.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

The IP address attempted to login to the SSH server with an invalid username.

It attempted to use the FTP server to distribute brute force tools.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

The IP attempted to perform a dictionary attack on the IMAP server.

This IP belongs to Amazon Web Services.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

Our team flagged this IP for injecting harmful ActiveX codes.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

It attempted to perform a VOIP Hopper scan on the Asterisk server.

The IP attempted to perform a SIP Invite Flood on the SIP server.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

The IP tried creating false server responses hoping to disrupt the SASL service.

It attempted to delete files from the SSH server.

The IP attempted to send emails from the Mail server to blacklisted email addresses.