Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

The IP has been implicated in multiple cases of URL manipulation attempts.

It launched header-based exploits, attempting to manipulate HTTP headers to cause inappropriate server responses.

This IP belongs to Dow Chemical.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

The IP attempted to perform a SIP Invite Flood on the SIP server.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

This IP belongs to General Motors.

This IP belongs to Nexon.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

The IP attempted to send spam emails from the Mail server.

It attempted to perform a credential stuffing attack on the SSH server.

It attempted to perform a SIPVicious scan on the Asterisk server.

The IP attempted to perform a brute force attack on the SASL server.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

This IP belongs to Lockheed Martin.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

It attempted to send phishing emails from the Postfix server.

It attempted to send emails with malicious links from the Mail server.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

The IP attempted to perform Integer Overflow attacks on the Apache server.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.