The IP made multiple unsuccessful login attempts in a short period of time.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

The IP attempted to perform a Nestea attack on the SSH server.

It attempted to send emails with deceptive subject lines from the Mail server.

The IP was involved in a rapid sequence of login attempts.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

The IP attempted to exploit known vulnerabilities in the SIP protocol.

The IP sent numerous SIP OPTIONS requests in a short time.

It attempted to perform a side channel attack on the SSH server.

Unexpected changes in the server configuration or installed software.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP belongs to 3M.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

GET /backup.sql: Attempting to access a backup of your database.

This IP belongs to State Farm Insurance.

It attempted to make unauthorized calls using the SIP server.

This IP belongs to ConocoPhillips.

The IP address has been involved in distributing adware to our server systems.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

It attempted to use the VOIP server to perform a reflection DDoS attack.