The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

It made multiple requests with identical cookies.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

There were several attempts from this IP to manipulate our server DNS records.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

This IP belongs to Intel.

Repeated connections to the server from unknown or suspicious IP addresses.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

Attempts to access the server using unusual HTTP methods or request types.

This IP belongs to Honeywell International.

This IP belongs to Cigna.

The IP was caught attempting to execute heap overflow attacks.

It partook in whaling attacks, specifically targeting high-profile users within our system.

The IP attempted to login to the POP3 server with an invalid username.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

The IP was caught attempting to execute heap overflow attacks.

This IP belongs to Home Depot.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

This IP executed mass-probing of various ports to seek vulnerabilities.

This IP belongs to AT&T.

It attempted to perform a password spraying attack on the IMAP server.