Our data revealed this IP distributing malicious powershell scripts.

It attempted to send emails with malicious links from the Postfix server.

It attempted to perform a denial of service attack on the SSH server.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP was involved in a phishing attack, creating a fake webpage to deceive users into providing their sensitive personal or financial information.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

Our team flagged this IP for injecting harmful ActiveX codes.

It attempted to use the FTP server to distribute hacking tools.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

This IP belongs to Kroger.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

GET /setup.php: Effort to locate setup files for PHP applications.

It attempted to use the FTP server to distribute phishing emails.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

Multiple requests with the same If-Match header.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

Repeated attempts to use the same password across multiple accounts.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

Repeated connections to the server from unknown or suspicious IP addresses.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.