The IP attempted to perform a SIP Register Flood on the VOIP server.

The IP sent numerous SIP OPTIONS requests in a short time.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

It made various efforts to insert spyware to monitor SSH communications covertly.

This IP belongs to Rogers Cable.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

A series of unusual file transfers originated from this IP.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

GET /administrator.php: Attempting to access an admin interface.

It attempted to perform a NTP amplification attack on the SSH server.

This IP belongs to Deutsche Telecom.

This IP belongs to Tyson Foods.

This IP belongs to World Fuel Services.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

Multiple requests with the same Via header.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

Our firewall recorded intrusion attempts originating from this suspicious IP.

This IP belongs to Bank of America.

This IP belongs to Cardinal Health.

It attempted to perform a credential stuffing attack on the SSH server.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

This IP belongs to Ziggo.