The IP was detected attempting to skirt our system's detection through spoofing.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

This IP belongs to Walmart.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

This IP was linked to an attempt at distributing malicious software within our system.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

The IP made multiple requests using uncommon HTTP methods.

This IP belongs to Alibaba Cloud Services.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

This IP belongs to Citigroup.

It sent VOIP requests to non-existent extensions.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

This IP belongs to FedEx.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

This IP belongs to Swisscom.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

The IP attempted to perform a Nestea attack on the SSH server.

The IP made multiple requests with the same DNT header.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

This IP belongs to Sky Broadband.