Incidents of privacy-invasive software floating in our network were linked to this IP.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

This IP belongs to Linode.

It attempted to perform a Sentinels amplification attack on the SSH server.

Multiple requests with the same X-Wap-Profile header.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

This IP belongs to McKesson.

This particular IP attempted to exploit vulnerabilities in our web applications.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

It attempted to make unauthorized calls using the Asterisk server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.

195.94.24.7

The IP attempted to list the contents of directories that it should not have access to.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

The IP made multiple requests to the password reset page.

This IP belongs to Steam.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

This IP belongs to Comcast.

The IP attempted to upload malicious files to the FTP server.

[url=https://bit.ly/123-123-movies-123-movie-movies-123]movie 123[/url]

The IP made multiple requests with the same X-UIDH header.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.