The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

The IP attempted to perform a timing attack on the SSH server.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

This IP belongs to Deere.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

The IP showed unusual patterns in session IDs.

This IP belongs to Mondelez International.

This IP belongs to United Technologies.

It attempted to take advantage of misconfigurations in the Apache server.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

Participated in a botnet attack to overwhelm our server’s resources.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

This IP belongs to KT Corporation.

It attempted to login to the IMAP server with an invalid password.

Several instances of aggressive advertising spyware have been linked to this IP.

The IP address attempted to exploit known vulnerabilities in server software.

It attempted to perform Session Prediction attacks on the Apache server.

Login attempts from foreign IP addresses.

It showed unusual patterns in the sequence of requests.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.