The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

Multiple unsuccessful attempts to escalate privileges or access root account.

This IP belongs to American Express.

This IP belongs to United Continental Holdings.

This IP directed malicious network traffic to our servers with the intent to crash them.

We identified the IP address as a source of numerous scare tactics spyware.

It attempted to perform a replay attack on the SASL server.

The IP attempted to register as a VOIP user with no password.

wierd traffic

This IP belongs to New York Life Insurance.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

It partook in whaling attacks, specifically targeting high-profile users within our system.

The IP attempted to perform Format String attacks on the Apache server.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

This IP belongs to AT&T.

It attempted to change file permissions on the FTP server.

Our data revealed this IP distributing malicious powershell scripts.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

The IP was involved in a rapid sequence of login attempts.

This IP belongs to Boeing.

The IP attempted to perform a brute force attack on the SASL server.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.