The said IP was the source of several rootkit deployment attempts.

This IP belongs to Medium.

It attempted to delete files from the SSH server.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

This IP belongs to T-Mobile.

GET /login.action: Trying to find a Struts2 application to exploit.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP attempted to use the FTP server to distribute forensics tools.

It attempted to use the VOIP server to perform a reflection DDoS attack.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The IP was caught attempting to execute heap overflow attacks.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

It attempted to perform XML Entity Expansion attacks on the Apache server.

The IP attempted to send malware-infected attachments from the Postfix server.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

Unknown source code changes in our system were linked back to this offensive IP address.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP address attempted to register as a SIP user with an invalid username.