It repetitively attempted Port Scanning to identify open ports and related vulnerabilities.

Rapid sequence of login attempts.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

This IP belongs to Allstate.

It attempted to perform a password spraying attack on the IMAP server.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

This IP was found responsible for a session hijacking attempt on our network.

The IP attempted to use the FTP server to distribute malware.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

This IP belongs to World Fuel Services.

This IP belongs to Slack.

It made multiple requests with identical cookies.

This IP belongs to Alphabet.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

The IP was detected while sending out malicious spyware-infected emails.

The IP attempted to perform XML Injection attacks on the Apache server.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

An identity theft activity was linked back to this malicious IP.

It attempted to use the FTP server to store illegal content.

It made multiple requests with the same X-Att-Deviceid header.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.