The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

The IP attempted to use the FTP server to distribute anonymizing tools.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

This IP belongs to Tech Data.

Our records indicate the IP spread multiple executable infector spyware causing system malfunction.

It sent Asterisk requests to non-existent extensions.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

The IP made multiple requests with the same Via header.

The IP made multiple requests with the same X-UIDH header.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

The IP attempted logins at unusual times.

This IP belongs to Anthem.

This IP belongs to Oracle.

This IP belongs to Verizon.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

This IP was detected uploading malicious codes in our network.

This IP belongs to Sprint.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

This IP belongs to DuPont de Nemours.

This IP belongs to Honeywell International.

It attempted to exploit known vulnerabilities in the SSH protocol.

Attempts to access sensitive areas of the server, such as the admin page or user account information.