It sent Asterisk requests to non-existent extensions.

This IP belongs to Archer-Daniels-Midland.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

This IP belongs to Time Warner Cable Internet.

This IP belongs to Home Depot.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

It attempted to use the VOIP server to perform a reflection DDoS attack.

It attempted to perform IP Spoofing attacks on the Apache server.

It attempted to use the FTP server to distribute identity theft tools.

It attempted to send emails with malicious links from the Postfix server.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

It attempted to perform a password spraying attack on the POP3 server.

It showed unusual activity in the server's error logs.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

This IP belongs to Zayo Bandwidth.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

A dangerous data surveillance spyware was tied back to this IP.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

This IP belongs to Microsoft.

The IP sent numerous Asterisk OPTIONS requests in a short time.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

This IP belongs to Abbott Laboratories.

It attempted to perform a SIP Register Flood on the Asterisk server.

It attempted to login to the FTP server with an invalid password.