GET /call?function=shell_exec&var=ls: Attempting remote code execution.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

This IP attempted to disrupt our systems through the propagation of worms.

The IP attempted to perform a replay attack on the SSH server.

This IP belongs to KT Corporation.

The IP attempted to register with the Asterisk server using an invalid username.

This IP belongs to CVS Health.

The IP made multiple requests with the same Proxy-Authorization header.

This IP belongs to Sony Network Communications.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

It attempted to use the FTP server to distribute pirated software.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

The IP has been implicated in multiple cases of URL manipulation attempts.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

Multiple requests with the same If-None-Match header.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

It attempted to flood the VOIP server with REGISTER requests.