GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

A series of unusual file transfers originated from this IP.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

It showed unusual activity in the server's error logs.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

This IP belongs to Sysco.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

The IP attempted to use the SASL server to relay phishing emails.

The IP attempted to register as a SIP user with no password.

This IP belongs to MTN.

It attempted to login to the SASL server with an invalid password.

This malicious IP was seen sending unusually high volumes of requests, a sign of potential automated bot activity.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

An identity theft activity was linked back to this malicious IP.

This IP belongs to Telkom SA.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

This IP belongs to BT Central Plus.

This IP belongs to Lowe's.

This IP belongs to Wells Fargo.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.