It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

The IP was traced back to stealthy installation attempts of clipboard monitors.

This IP belongs to Cisco Systems.

This IP belongs to KT Corporation.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

Attempts to access the server using credentials that have been involved in previous security incidents.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

This IP belongs to Dell Technologies.

This IP belongs to America Movil.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

A series of unusual file transfers originated from this IP.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

The IP sent numerous Asterisk OPTIONS requests in a short time.

It was discovered illicitly scanning the server for potential vulnerabilities.

Multiple requests with the same X-Wap-Profile header.

It attempted to perform a VOIP Hopper scan on the Asterisk server.

The IP attempted to send malware-infected attachments from the Mail server.