The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

This IP belongs to Virgin Media.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

The IP attempted to perform a SIP Register Flood on the VOIP server.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

This IP belongs to Freddie Mac.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

It made multiple requests with identical POST parameters.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

Mudar senha

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

It attempted to take advantage of misconfigurations in the Apache server.

It attempted to flood the SIP server with REGISTER requests.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

This IP belongs to Tumblr.

The IP made multiple unsuccessful login attempts in a short period of time.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

This IP belongs to Valero Energy.