It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

It attempted to perform Session Sidejacking attacks on the Apache server.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

It attempted to flood the Asterisk server with REGISTER requests.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

This IP belongs to Fannie Mae.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

The IP attempted to use the FTP server to distribute hacking tutorials.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

It attempted to send emails from the Postfix server that violate the server's email content policy.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

Participated in malicious pranks by altering messages sent through the server.

The IP attempted to perform Integer Overflow attacks on the Apache server.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

The IP attempted to execute unauthorized commands on the SSH server.

This IP belongs to Microsoft.

It attempted to use the FTP server to distribute pirated software.

This particular IP has been used in advanced persistent threats against our servers.

This IP belongs to Deutsche Telecom.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.