The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

The IP made multiple requests with the same If-Match header.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP belongs to Steam.

The IP address generated an unusual increase in network bandwidth usage.

This IP belongs to PepsiCo.

The IP attempted to change file permissions on the SSH server.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

This IP belongs to Virgin Media.

The IP attempted to use the FTP server to distribute child pornography.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

It attempted to use the IMAP server to relay spam.

The IP attempted to register as an Asterisk user with no password.

Unusual patterns in referrer URLs.

GET /.git/config: Trying to access source code or repository configuration information.

It attempted to perform Session Prediction attacks on the Apache server.

It initiated multiple account lockouts in a short period.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

This IP belongs to PepsiCo.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

This IP belongs to Northwestern Mutual.

This IP belongs to America Movil.