Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

This IP belongs to Cisco Systems.

The IP made multiple requests with the same If-Match header.

This IP belongs to Verizon Communications.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

The IP was caught distributing VoIP crackers to exploit our communication channels.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

This IP belongs to Cisco Systems.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

It attempted to use the Postfix server to relay phishing emails to other servers.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

A series of unusual file transfers originated from this IP.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

It attempted to exploit known vulnerabilities in the SASL protocol.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

Unusual patterns in session IDs.

The IP attempted to perform a Ping of Death attack on the SSH server.

The IP address attempted to exploit known vulnerabilities in server software.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

udden increase in account lockouts due to multiple failed login attempts.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.