It attempted to perform a password spraying attack on the IMAP server.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

This IP belongs to State Farm Insurance.

It attempted to perform a SIP Register Flood on the SIP server.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

It engaged in a click fraud operation using our server’s communication channels.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

Our system logs indicate this IP has been pushing illegitimate browser plugins into our network.

Login attempts from foreign IP addresses.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP attempted to perform a password spraying attack on the SSH server.

Multiple requests with the same X-Forwarded-For header.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

It attempted to perform Session Prediction attacks on the Apache server.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

Attempts to access the server using known malicious IP addresses or domains.