The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP made multiple requests with the same Origin header.

This IP belongs to T-Mobile.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

This IP belongs to Dell Technologies.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

This IP has been identified as running a botnet targeting our server systems with ransomware.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

The IP attempted to perform a password spraying attack on the SASL server.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

The IP attempted to bypass the SASL server's authentication mechanism.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

The IP's involvement in spreading password stealers has compromised our network's protection.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

This IP belongs to Vkontakte.

The IP attempted to register with the VOIP server using an invalid username.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.