It made multiple requests with the same Expect header.

Repeated attempts to exploit known vulnerabilities in server software.

This IP has been marked as the origin of numerous SQL injection attacks.

This IP belongs to Vkontakte.

This IP belongs to Amazon.

The IP attempted to upload malicious files to the FTP server.

It made numerous requests to the same endpoint in a short time.

The IP address initiated multiple unsuccessful login attempts.

The IP sent malformed VOIP requests, potentially indicating an attempt to crash the server.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

This IP belongs to FedEx.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

Unusual patterns in user agent strings.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

This IP belongs to Archer-Daniels-Midland.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

A series of active scareware campaigns was traced back to this IP address.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

The IP attempted to perform a Fraggle attack on the SSH server.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

It persistently tried to exploit weaknesses in the SSH communication encryption.