This IP belongs to Reliance Jio.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

It attempted to use the POP3 server to relay phishing emails.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

The IP attempted to perform a timing attack on the SSH server.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

Repeated attempts to access rarely used or hidden services on the server.

This IP belongs to Time Warner Cable Internet.

It attempted to perform a credential stuffing attack on the SSH server.

This IP belongs to Globe Telecom.

It attempted to exploit known vulnerabilities in the FTP protocol.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

It attempted to upload malicious files to the SSH server.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

It attempted to perform a Teardrop attack on the SSH server.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

This IP belongs to Telus Communications.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

It made multiple requests with the same X-Forwarded-For header.

It attempted to perform XPath Injection attacks on the Apache server.

The IP address attempted to exploit known vulnerabilities in the Apache server software.