The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

It made multiple requests with the same X-Wap-Profile header.

It attempted to use the Postfix server to relay spam to other servers.

This IP belongs to Rogers Cable.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

It sent VOIP requests to non-existent extensions.

Participated in a botnet attack to overwhelm our server’s resources.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

It attempted to flood the VOIP server with REGISTER requests.

Multiple attempts to access the server using different ports or protocols.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

It attempted to perform a replay attack on the SASL server.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

Multiple requests with the same X-Att-Deviceid header.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

Multiple requests with the same X-UIDH header.

The IP attempted to perform a brute force attack on the SSH server.

The IP attempted to use the POP3 server to distribute malware.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

The IP initiated fake traffic attacks to manipulate webpage rankings and conduct click fraud.

This IP belongs to China Mobile.