It attempted to list the contents of directories that it should not have access to.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

This IP belongs to Target.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

It attempted to make unauthorized calls using the SIP server.

The IP attempted to use the FTP server to distribute hacking tutorials.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

It attempted to exploit known vulnerabilities in the Postfix software.

This IP belongs to Anthem.

The IP sent numerous Asterisk OPTIONS requests in a short time.

Attempts to access the server using known malicious IP addresses or domains.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

This IP belongs to Xbox Live.

The IP attempted to send emails from the Mail server without proper authentication.

This IP belongs to America Movil.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

It attempted to use the POP3 server to relay phishing emails.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

This IP attempted to disrupt our systems through the propagation of worms.

The IP was seen launching a DDoS attack on the Asterisk server, overwhelming it with traffic to disrupt its normal functioning.

The IP was detected attempting to skirt our system's detection through spoofing.

This IP belongs to Fannie Mae.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

This IP belongs to Boeing.