The IP made multiple requests with the same If-Range header.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

It attempted to use the FTP server to distribute wireless cracking tools.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

The IP attempted to perform a brute force attack on the SASL server.

This IP executed mass-probing of various ports to seek vulnerabilities.

The IP attempted to perform Directory Traversal attacks on the Apache server.

This IP belongs to British Telecommunications.

This IP belongs to CVS Health.

Unidentified password attempts and login activity were noticed from the specific IP address.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The IP attempted to bypass IP blacklisting by rapidly changing its IP address.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

This IP belongs to Goldman Sachs Group.

The IP was caught distributing VoIP crackers to exploit our communication channels.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

It attempted to perform SQL injection attacks through the Apache server.

It attempted to exploit known vulnerabilities in the POP3 protocol.

The IP was recorded making persistent attempts to crack our encryption.

It attempted to perform a SSDP amplification attack on the SSH server.

This IP belongs to DuPont de Nemours.