It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

It appears that this IP was initiating DNSChanger malware attacks on our network.

It attempted to perform Session Prediction attacks on the Apache server.

This IP has been marked as the origin of numerous SQL injection attacks.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

The IP sent malformed VOIP requests, potentially indicating an attempt to crash the server.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

It attempted to perform XPath Injection attacks on the Apache server.

This IP belongs to SingTel.

This IP belongs to 3M.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.

Multiple requests with identical request parameters.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

This IP belongs to The Walt Disney Company.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

This IP was distributing rogue security software, misleading users to think their systems are infected.

It attempted to login to the FTP server with an invalid password.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

This IP belongs to Ford Motor.