GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

It sent VOIP requests to non-existent extensions.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

This IP belongs to GoDaddy.

It made multiple requests with the same Range header.

Multiple attempts to access the server using encrypted tunnels or proxies.

This IP belongs to Proximus.

This IP belongs to Dell Technologies.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

It actively attempted to employ session-splicing techniques, interacting with multiple SSH sessions simultaneously to smudge its attack trace.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

The IP attempted to download emails from the IMAP server without authorization.

This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

It attempted to perform a SIP Register Flood on the Asterisk server.

This IP belongs to Facebook.

Multiple requests with the same Warning header.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

The IP made repeated attempts to authenticate with the SIP server using different usernames.