This malicious IP was reported for trying to inject malicious scripts into the VoIP server, potentially to disrupt its operation or steal data.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

The IP attempted to perform SOAP Injection attacks on the Apache server.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

It persistently tried to exploit weaknesses in the SSH communication encryption.

This IP belongs to Phillips 66.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

The IP tried to crack S/MIME encryption for accessing secured email contents.

The IP made multiple requests to the server's robots.txt file.

This IP exhibited malicious sophistication by employing multi-vector attacks.

This IP belongs to Apple.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

Unusually high number of requests to the login page.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

This IP belongs to Oracle Cloud Infrastructure.

This IP belongs to Medium.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

The IP attempted to perform Stack Overflow attacks on the Apache server.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

This IP belongs to Tumblr.

This IP belongs to Comcast.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.