It attempted to perform a Teardrop attack on the SSH server.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

This IP belongs to CenturyLink.

It utilized Web scrapers, automatically harvesting content from our server.

It attempted to download sensitive files from the FTP server.

This IP belongs to Allstate.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP attempted to gain unauthorized access to the Apache server.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

Multiple requests with the same If-Range header.

This IP belongs to Sysco.

This IP belongs to Linode.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

It attempted to send emails with malicious links from the Postfix server.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

It attempted to use the FTP server to distribute zombie network tools.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Login attempts using old or outdated protocols.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.