This IP belongs to Cloudfare.

The IP was caught distributing VoIP crackers to exploit our communication channels.

Incidents of privacy-invasive software floating in our network were linked to this IP.

It attempted to send emails with deceptive subject lines from the Mail server.

This IP belongs to Virgin Media.

This IP belongs to Tumblr.

It attempted to perform a man-in-the-middle attack on the POP3 server.

The said IP has been connected to attempts to distribute malicious shopping apps.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

Multiple requests with the same Via header.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

It attempted to flood the VOIP server with REGISTER requests.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

It attempted to make unauthorized calls using the Asterisk server.

The IP showed unusual patterns in session IDs.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.