POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

It attempted to perform a man-in-the-middle attack on the POP3 server.

This IP belongs to Nintendo.

The IP attempted to delete files from the FTP server.

Multiple failed attempts to use the server’s API.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

The IP made multiple requests with the same X-UIDH header.

The IP showed unusual patterns in session IDs.

???? ??????!

Multiple requests with the same Proxy-Authorization header.

It attempted to perform a brute force attack on the POP3 server.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

This IP attempted to distribute malicious Javascript files.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

This IP belongs to PepsiCo.

This IP belongs to Amazon Web Services.

GET /vuln.html: Looking for any page vulnerabilities.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

GET /administrator.php: Attempting to access an admin interface.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

The IP has initiated several exploits, specifically for software vulnerabilities.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.