The IP attempted to register with the VOIP server using an invalid username.

This IP belongs to Dropbox.

This IP belongs to AT&T.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

This IP belongs to Kroger.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

The IP was traced back to stealthy installation attempts of clipboard monitors.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

It appears that this IP was initiating DNSChanger malware attacks on our network.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

The IP made multiple requests with the same Origin header.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

GET /../htpasswd: Trying to access password files using directory traversal.

This IP belongs to Sprint.

This IP belongs to CHS.

It was flagged that this IP had been used in conducting method tampering on our servers.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

The IP address attempted to login to the IMAP server with an invalid username.

This IP belongs to Tech Data.

This IP executed mass-probing of various ports to seek vulnerabilities.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

This IP belongs to the United States Department of Defense.