This IP belongs to Procter & Gamble.

It attempted to take advantage of misconfigurations in the Apache server.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

It attempted to use the FTP server to relay data to other systems.

It attempted to use the IMAP server to relay spam.

Unusual patterns in referrer URLs.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP belongs to Alibaba Cloud Services.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

This IP belongs to KDDI.

It attempted to use the SSH server as a proxy for other malicious activities.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

This IP belongs to IBM.

The IP made multiple requests with the same TE header.

This IP belongs to Telstra.

It attempted to use the POP3 server to relay phishing emails.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

The IP attempted to use the FTP server to distribute rootkit software.

It was flagged that this IP had been used in conducting method tampering on our servers.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

The IP attempted to perform a dictionary attack on the IMAP server.