Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

It sent SIP INVITE requests to non-existent extensions.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.

It attempted to create new directories on the SSH server.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

It attempted to perform Session Sidejacking attacks on the Apache server.

This IP belongs to Sprint.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

Multiple requests with the same Proxy-Authorization header.

Attempts to use privileged service accounts outside of their normal usage patterns.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

The IP attempted to download sensitive files from the SSH server.

This IP belongs to Mondelez International.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

This IP belongs to General Electric.

This IP belongs to Vkontakte.

The IP under scrutiny has been associated with multiple modem hijackers.

It was flagged that this IP had been used in conducting method tampering on our servers.

It attempted to perform a password spraying attack on the IMAP server.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

It attempted to perform Session Prediction attacks on the Apache server.

This IP belongs to Hong Kong Broadband Network.

This IP belongs to Telus Communications.