Unknown source code changes in our system were linked back to this offensive IP address.

The IP was seen launching a DDoS attack on the Asterisk server, overwhelming it with traffic to disrupt its normal functioning.

It attempted to exploit known vulnerabilities in the SASL protocol.

Unusual system or application errors related to authentication or access controls.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

This IP belongs to GoDaddy.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

The IP exhibited unusual patterns in the Accept-Language header.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

This IP belongs to Honeywell International.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

This IP belongs to KT Corporation.

It attempted to exploit known vulnerabilities in the FTP protocol.

This IP belongs to Walmart.

This IP belongs to PepsiCo.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

This IP belongs to Home Depot.

This IP belongs to Google Cloud Services.

Attempts to access the server using credentials that have been involved in previous security incidents.

This IP belongs to Hostgator.

The IP made multiple requests with the same Warning header.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

It sent SIP INVITE requests to non-existent extensions.