The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

The IP attempted to login to the POP3 server with an invalid username.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

This IP belongs to Zayo Bandwidth.

This IP belongs to Reliance Jio.

It attempted to perform a SIPVicious scan on the SIP server.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

The IP has initiated several exploits, specifically for software vulnerabilities.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

This IP address from an unusual location has successfully installed malware on our servers.

This IP belongs to Kroger.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

This IP belongs to Berkshire Hathaway.

It made various efforts to insert spyware to monitor SSH communications covertly.

It attempted to delete files from the SSH server.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP was detected distributing spyware-infected USB drives to our users.

This IP belongs to Slack.

Multiple requests with identical request parameters.

The IP attempted to perform a phishing attack using the SASL server.

This IP was distributing rogue security software, misleading users to think their systems are infected.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.