Multiple failed attempts to use the server’s API.

It attempted to perform a credential stuffing attack on the SSH server.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

This IP belongs to Bristol-Myers Squibb.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

The IP attempted to gain unauthorized access to the Apache server.

It attempted to send emails from the Postfix server that violate the server's usage policy.

This IP belongs to AmerisourceBergen.

The IP made multiple requests with the same If-Match header.

It attempted to upload malicious scripts to the Apache server.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

Unusually high number of requests to a specific service or application within the server.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

The IP attempted to perform a SIPVicious scan on the VOIP server.

This IP belongs to Fannie Mae.

It attempted to login to the SSH server with an invalid password.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

The IP attempted to perform a replay attack on the IMAP server.

An alarming frequency of microphone loggers has been traced back to this IP.

The IP attempted to send spam emails from the Mail server.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.