This IP belongs to AT&T.

GET /.git/config: Trying to access source code or repository configuration information.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

Multiple requests with the same Proxy-Connection header.

This IP belongs to Alibaba Cloud Services.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

Multiple requests with the same If-Range header.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

This IP belongs to United Continental Holdings.

This IP belongs to Google Cloud Services.

This IP belongs to AT&T.

It attempted to download sensitive files from the FTP server.

The IP attempted to register as an Asterisk user with no password.

The IP address attempted to login to the SSH server with an invalid username.

The IP made multiple requests with the same Origin header.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

Unusual patterns in referrer URLs.

It made multiple requests with the same X-Wap-Profile header.

We identified the IP address as a source of numerous scare tactics spyware.

It attempted to use the FTP server to distribute hacking tools.

The IP attempted to perform a DNS amplification attack on the SSH server.