The IP attempted to upload malicious files to the FTP server.

This IP belongs to Microsoft.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

The IP address attempted delivering malicious packets to disrupt the system's operation.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

The IP attempted a Rootkit installation to gain root access and control server activity.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

It was found that the IP had deployed rogue security software in our system.

This IP belongs to American Airlines Group.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

POST /wp-admin/admin-ajax.php: The Actor may be trying to exploit some vulnerable WordPress theme or plugin.

The IP attempted to register as an Asterisk user with no password.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

The IP address attempted delivering malicious packets to disrupt the system's operation.

Attempts to use automated scripts or tools for password cracking.

This IP belongs to TELUS Communications.

Our team has linked several viruses dissemination activities to this IP.

It launched a botnet to infiltrate our Apache-DDoS service.

The IP attempted to download emails from the IMAP server without authorization.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

It attempted to send emails from the Mail server that violate the server's usage policy.