The IP made repeated attempts to authenticate with the SIP server using different usernames.

It attempted to perform Heap Overflow attacks on the Apache server.

This particular IP attempted to exploit vulnerabilities in our web applications.

Several instances of aggressive advertising spyware have been linked to this IP.

It attempted to send emails from the Postfix server that violate the server's usage policy.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

Participated in malicious pranks by altering messages sent through the server.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

This IP belongs to Liberty Mutual Insurance Group.

It attempted to perform a SIP Register Flood on the Asterisk server.

It attempted to use the Postfix server to relay spam to other servers.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

This IP belongs to Valero Energy.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

This IP was detected uploading malicious codes in our network.

This IP belongs to Pfizer.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

The IP attempted to register with the Asterisk server using an invalid username.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

Este IP pediu acesso 28/12/24 23:47 e 23:50 Chrome, gov.br, a localização não corresponde a minha. 189.4.108.8