It attempted to perform HTTP Response Splitting attacks on the Apache server.

This IP belongs to Cisco Systems.

It made multiple requests with identical POST parameters.

High network traffic at unusual times, suggesting an automated process is running.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

This IP belongs to Cox Communications.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

The IP made multiple requests with the same Proxy-Connection header.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

It attempted to flood the SIP server with REGISTER requests.

This IP belongs to Exelon.

This IP belongs to Massachusetts Mutual Life Insurance.

It was responsible for an unusual increase in server CPU usage.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

It utilized Web scrapers, automatically harvesting content from our server.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

The IP made multiple requests with the same X-UIDH header.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

It attempted to perform a credential stuffing attack on the SSH server.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.