This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

The IP attempted to perform a timing attack on the SSH server.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

This IP belongs to TELUS Communications.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

This IP belongs to Berkshire Hathaway.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

Our data indicates this IP has performed data breaches by launching phishing attacks.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

Multiple requests to the server's robots.txt file.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The IP attempted to use the FTP server to distribute anonymizing tools.

This IP belongs to Vodacom.

The IP attempted to bypass the SASL server's authentication mechanism.

This IP belongs to Dropbox.

This IP belongs to Rogers Cable.

This IP belongs to JPMorgan Chase.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The IP attempted to perform a key exchange attack on the SSH server.