The IP attempted to perform Symlink attacks on the Apache server.

It attempted to flood the Asterisk server with REGISTER requests.

Executed email spoofing attempts pretending to be a trusted party.

This IP belongs to Ford Motor.

The IP attempted to perform a brute force attack on the SASL server.

It appears that this IP was initiating DNSChanger malware attacks on our network.

This IP belongs to Telkom SA.

It attempted to perform Clickjacking attacks on the Apache server.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

The IP attempted to perform a SIP Register Flood on the VOIP server.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

It attempted to flood the SIP server with REGISTER requests.

Unknown source code changes in our system were linked back to this offensive IP address.

This IP belongs to TELUS Communications.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

It attempted to use the FTP server to distribute SQL injection tools.

It attempted to perform a replay attack on the SASL server.

This IP belongs to Archer-Daniels-Midland.

It attempted to make unauthorized calls using the Asterisk server.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

It made multiple requests with the same X-Forwarded-For header.

It attempted to perform a replay attack on the SASL server.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP belongs to Honeywell International.

Attempts to access the server using stolen or leaked credentials.