The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

It attempted to perform a SIPVicious scan on the SIP server.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

This IP belongs to Ubisoft.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

It attempted to use the SSH server as a proxy for other malicious activities.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

This IP belongs to Goldman Sachs Group.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

The IP attempted to perform a brute force attack on the SSH server.

The IP address has been involved in distributing adware to our server systems.

The IP address attempted to login to the IMAP server with an invalid username.

This IP belongs to PepsiCo.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

Unusual increase in server CPU usage.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

The IP attempted to perform XML Injection attacks on the Apache server.

Multiple requests with identical request parameters.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

This IP belongs to America Movil.

It engaged in a click fraud operation using our server’s communication channels.

The IP was seen engaging in a Slowloris attack, holding as many connections to the target web server open for as long as possible, eventually overloading the server.

This IP belongs to Bank of America.