The specific IP has been identified attempting to load malicious browser helper objects into the network.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

This IP belongs to AT&T.

It attempted to use the FTP server to distribute web proxy tools.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

The IP was caught distributing VoIP crackers to exploit our communication channels.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

This IP belongs to CHS.

The IP attempted to perform Directory Traversal attacks on the Apache server.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

It made multiple requests with the same Range header.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP attempted to use the FTP server to distribute forensics tools.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

The IP address attempted to register as a SIP user with an invalid username.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

This IP belongs to American Airlines Group.

This IP belongs to Nationwide.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

The IP attempted to delete directories on the SSH server.

It made multiple requests with the same X-Csrf-Token header.

The IP attempted to use the FTP server to distribute spam.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

Unusual increase in network bandwidth usage.