The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

It attempted to exploit known vulnerabilities in the Mail protocol.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

The IP attempted to use the SSH server to relay data to other systems.

This IP belongs to Kraft Heinz.

The IP attempted to list the contents of directories that it should not have access to.

The IP was caught distributing VoIP crackers to exploit our communication channels.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

This IP blocked legitimate users by performing IP hijacking.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The IP attempted to use the FTP server to distribute forensics tools.

This IP belongs to Tumblr.

This IP belongs to Walgreens Boots Alliance.

It sent VOIP requests to non-existent extensions.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

Our logs indicated an unusually high traffic volume originating from this IP address.

GET /backup.sql: Attempting to access a backup of your database.

The IP attempted to perform a key exchange attack on the SSH server.

This IP belongs to Intel.

This IP exhibited malicious sophistication by employing multi-vector attacks.