Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

It attempted to perform a SIP Register Flood on the SIP server.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

This IP belongs to Exxon Mobil.

It attempted to perform a SIP Register Flood on the Asterisk server.

It attempted to use the FTP server to distribute pirated software.

It attempted to perform a brute force attack on the POP3 server.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

It was found initiating attack vectors to exploit SSH agent forwarding.

Our system blocked an attempted Code Injection attack from this IP.

It attempted to perform a Steam protocol amplification attack on the SSH server.

This IP has been marked as the origin of numerous SQL injection attacks.

Attempts to access the server using unusual HTTP methods or request types.

This IP has been detected spreading notorious credit card skimmers.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

It sent Asterisk requests to non-existent extensions.

This IP belongs to Alphabet.

This IP was associated with targeted spear phishing attempts against our senior staff.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.