It attempted to download sensitive files from the FTP server.

This IP belongs to Globe Telecom.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

This IP belongs to UnitedHealth Group.

It attempted to perform a Teardrop attack on the SSH server.

Several cross-site scripting attacks were traced back to this IP.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

This IP belongs to Verizon Communications.

A large number of requests from a single user agent, suggesting an automated process.

Several instances of password stealers were traced back to this notorious IP.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

It attempted to perform a session hijacking attack on the SSH server.

This IP belongs to Citigroup.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

This IP belongs to Best Buy.

The IP attempted to mark emails as read on the POP3 server without authorization.

Our team flagged this IP for injecting harmful ActiveX codes.

This IP belongs to Vkontakte.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

This IP directed malicious network traffic to our servers with the intent to crash them.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

It repetitively attempted Port Scanning to identify open ports and related vulnerabilities.