The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

The IP exhibited unusual patterns in the Accept-Language header.

Frequent password reset requests.

Several instances of aggressive advertising spyware have been linked to this IP.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

The IP attempted to use the FTP server to distribute spam.

The IP attempted to send emails from the Postfix server without proper authentication.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

The IP attempted to perform a timing attack on the SSH server.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

We flagged down attempts from the IP to leak backdoor viruses into the system.

It attempted to perform a SIPVicious scan on the SIP server.

It attempted to use the SSH server as a proxy for other malicious activities.

The IP attempted to perform XML Injection attacks on the Apache server.

Multiple requests with identical cookies.

It showed an unusually high number of requests to the login page.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

The IP made multiple requests with the same Proxy-Authorization header.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.