GET /configuration.php.old: Trying to locate backup configuration files.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

This IP was distributing rogue security software, misleading users to think their systems are infected.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This IP belongs to Northwestern Mutual.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

It attempted to perform a VOIP Hopper scan on the Asterisk server.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

This IP belongs to Ubisoft.

It attempted to perform a password spraying attack on the POP3 server.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

This IP belongs to Sony Network Communications.

This IP belongs to NetEase.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

This IP belongs to Bell Canada.

It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

This IP belongs to British Telecommunications.

Excessive traffic from a single IP address.

This IP belongs to America Movil.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.