The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

It attempted to use the FTP server to distribute password recovery tools.

The IP attempted to execute unauthorized commands on the SSH server.

This IP belongs to Walgreens Boots Alliance.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP address attempted to login to the SSH server with an invalid username.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

It attempted to perform Unvalidated Redirects and Forwards attacks on the Apache server.

The IP made multiple requests with the same If-Match header.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

It attempted to send emails with malicious links from the Mail server.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The IP attempted to login to the Postfix server with an invalid username.

This IP belongs to Nexon.

It attempted to send emails with malicious links from the Mail server.

It attempted to perform a brute force attack on the POP3 server.

This IP belongs to Optus.