It attempted to perform a dictionary attack on the SSH server.

It attempted to perform a SYN flood attack on the SSH server.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

It attempted to perform a password spraying attack on the POP3 server.

This IP belongs to Ziggo.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

Attempts to access the server using stolen or leaked credentials.

The IP attempted to perform a Kad network amplification attack on the SSH server.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

The IP attempted to use the FTP server to distribute rootkit software.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

The IP attempted to perform a key exchange attack on the SSH server.

SPAM Possibly Virus Fake financial reports. The sender's email address shows as from our company.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

GET /configuration.php.old: Trying to locate backup configuration files.

It attempted to flood the VOIP server with REGISTER requests.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

This IP belongs to Bristol-Myers Squibb.

It attempted to use the FTP server to distribute terrorist propaganda.

It attempted to execute unauthorized commands on the Apache server.

This IP belongs to Twenty-First Century Fox.