This IP belongs to Oracle Cloud Infrastructure.

The IP attempted to perform a SIP Register Flood on the VOIP server.

This IP belongs to General Motors.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

The IP attempted to use the SASL server to relay phishing emails.

This IP belongs to Ziggo.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

This IP belongs to CVS Health.

This IP belongs to KT Corporation.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

Attempts to use automated scripts or tools for password cracking.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

It attempted to flood the Asterisk server with REGISTER requests.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP belongs to Cigna.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

This IP belongs to Freddie Mac.