The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

The IP attempted to perform a dictionary attack on the POP3 server.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

This IP executed mass-probing of various ports to seek vulnerabilities.

The IP address attempted to login to the IMAP server with an invalid username.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP belongs to General Motors.

It attempted to login to the IMAP server with an invalid password.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

The IP attempted to perform a downgrade attack on the SSH server.

This IP belongs to Dropbox.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

It attempted to exploit known vulnerabilities in the POP3 protocol.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

The IP attempted to perform a QOTD amplification attack on the SSH server.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

It attempted to perform a SIPVicious scan on the Asterisk server.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

This IP belongs to Kroger.

This IP belongs to CHS.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.