The IP attempted a race condition attack, aiming to execute unwanted sequences in the server.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

It attempted to flood the Asterisk server with REGISTER requests.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

It made multiple requests from user agents claiming to be bots.

This IP belongs to AmerisourceBergen.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

Several phishing emails have been traced back to this suspicious IP address.

Executed email spoofing attempts pretending to be a trusted party.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

This IP belongs to Apple.

This IP blocked legitimate users by performing IP hijacking.

This IP belongs to Cardinal Health.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

Multiple requests with identical Accept-Charset headers.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

GET /.git/config: Trying to access source code or repository configuration information.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

Our team discovered that specific IP was distributing intrusive cookie trackers.

Multiple requests to the password reset page.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

This IP belongs to Marathon Petroleum.