It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

This IP belongs to Publix Super Markets.

This IP belongs to PythonAnywhere.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

The IP attempted to use the FTP server as a proxy for other malicious activities.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

The IP made multiple requests with the same Proxy-Authorization header.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

The IP was flagged for attempting dictionary attacks on our user accounts.

This IP belongs to Hostgator.

GET /.git/config: Trying to access source code or repository configuration information.

It attempted to use the IMAP server to relay spam.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

It attempted to perform a credential stuffing attack on the SASL server.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

It attempted to perform a denial of service attack on the SSH server.

The said IP has been connected to attempts to distribute malicious shopping apps.

The IP address was flagged for employing a packet sniffer on our network.

Multiple requests with identical Accept-Encoding headers.

It engaged in a click fraud operation using our server’s communication channels.