The IP attempted to use the FTP server to distribute network mapping tools.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Executed email spoofing attempts pretending to be a trusted party.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

This IP belongs to Proximus.

It launched a botnet to infiltrate our Apache-DDoS service.

This IP attempted to distribute malicious Javascript files.

It attempted to login to the POP3 server with an invalid password.

This IP belongs to Home Depot.

It attempted to make unauthorized calls using the Asterisk server.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

This IP belongs to Archer-Daniels-Midland.

The IP performed regular system foot printing to gain intel on weak points in our server.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

Our system logs indicate this IP has been pushing illegitimate browser plugins into our network.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

This IP was distributing rogue security software, misleading users to think their systems are infected.

It was responsible for an unusual increase in server CPU usage.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

This IP belongs to Berkshire Hathaway.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

This IP belongs to Northwestern Mutual.

It attempted to perform Session Prediction attacks on the Apache server.

This IP belongs to McKesson.

The IP attempted to perform a man-in-the-middle attack on the SASL server.