It attempted to use the FTP server to distribute web proxy tools.

It partook in whaling attacks, specifically targeting high-profile users within our system.

This IP attempted to disrupt our systems through the propagation of worms.

This IP was caught circulating email worms, camouflaged as legitimate mails.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

It attempted command injection attacks, hoping to execute unauthorized commands.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

It attempted to perform SQL injection attacks through the Apache server.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

The IP attempted to perform Format String attacks on the Apache server.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

The IP address has been involved in distributing adware to our server systems.

The IP attempted to perform a dictionary attack on the POP3 server.

It attempted to perform a side channel attack on the SSH server.

It made multiple requests with the same X-Forwarded-For header.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

Several phishing emails have been traced back to this suspicious IP address.

This IP has been identified as running a botnet targeting our server systems with ransomware.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

It attempted to perform a dictionary attack on the SASL server.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

This IP belongs to UnitedHealth Group.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.