The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

This IP belongs to Humana.

It attempted to perform a replay attack on the SASL server.

The IP made multiple requests with the same Origin header.

The IP attempted to perform Format String attacks on the Apache server.

It attempted to download sensitive files from the FTP server.

The IP attempted to use the FTP server to distribute credit card fraud tools.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

This IP belongs to Anthem.

This IP belongs to Dell Technologies.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

This IP belongs to State Farm Insurance.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

The IP attempted to mark emails as read on the POP3 server without authorization.

This IP belongs to CHS.

This IP belongs to Kraft Heinz.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

The IP attempted to perform a brute force attack on the SSH server.

It attempted to perform a denial of service attack on the SSH server.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

Multiple attempts to access the server using anonymous or generic user accounts.