This IP belongs to Oracle.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

GET /errors.log: Shows an actor trying to access server error logs.

The IP attempted to perform a downgrade attack on the SSH server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

It attempted to perform Buffer Overflow attacks on the Apache server.

This IP belongs to Alibaba Cloud Services.

The IP showed unusual patterns in session IDs.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

This IP belongs to Procter & Gamble.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.

This IP belongs to Google Cloud Services.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

It attempted to use the FTP server to distribute SQL injection tools.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

This IP belongs to DigitalOcean.

It attempted to use the SASL server to distribute malware.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

This IP belongs to Dell Technologies.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

The IP attempted to perform a SIP Invite Flood on the SIP server.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.