It attempted to perform a SIPVicious scan on the Asterisk server.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

This IP attempted to distribute malicious Javascript files.

The IP made multiple requests with the same Origin header.

It attempted to make unauthorized calls using the SIP server.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

This IP belongs to Dell Technologies.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

A majority of our user base received phishing emails originated from this particular IP address.

This IP belongs to Microsoft Azure.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

Attempts to access the server using credentials that have been involved in previous security incidents.

The IP attempted to brute force the password to gain mail account access.

The IP attempted to use the FTP server to distribute rootkit software.

Our network security detected the IP spreading malicious macros through document files.

GET /errors.log: Shows an actor trying to access server error logs.

This IP belongs to Sky Broadband.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.