This IP has been flagged for attempting to escalate privileges in our network.

It initiated multiple account lockouts in a short period.

The IP attempted to perform Format String attacks on the Apache server.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

The IP has initiated several exploits, specifically for software vulnerabilities.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

This IP belongs to Oracle.

This IP belongs to Costco Wholesale.

Our firewall recorded intrusion attempts originating from this suspicious IP.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

This IP belongs to McKesson.

The IP attempted to use the Mail server to relay phishing emails to other servers.

It attempted to perform a SIP Register Flood on the Asterisk server.

It made multiple requests with the same Expect header.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

The IP had been flagged for initiating SYN flood attacks on our servers.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

This IP belongs to TELUS Communications.

This IP belongs to Vkontakte.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

GET /admin: Looking for an unprotected admin page.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.