This IP belongs to State Farm Insurance.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

HEAD /: May be part of a larger Reconnaissance.

This IP belongs to AmerisourceBergen.

The IP attempted to register as a VOIP user with no password.

We flagged down attempts from the IP to leak backdoor viruses into the system.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

It attempted to use the FTP server to distribute terrorist propaganda.

This IP belongs to Plusnet.

This IP belongs to General Dynamics.

Multiple requests to the password reset page.

Login attempts from foreign IP addresses.

HEAD /: May be part of a larger Reconnaissance.

It attempted to perform XML Entity Expansion attacks on the Apache server.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

GET /.git/config: Trying to access source code or repository configuration information.

The IP attempted to register as a VOIP user with no password.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

Incriminating activities involving the distribution of trojan horses were linked to this IP address.

Repeated attempts to alter or delete log files to cover tracks.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

The IP attempted to perform a distributed denial of service attack on the SSH server.

Unusual system or application errors related to authentication or access controls.

The IP sent numerous SIP OPTIONS requests in a short time.