Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

This IP was linked to an attempt at distributing malicious software within our system.

This IP belongs to Sprint.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This IP was caught circulating email worms, camouflaged as legitimate mails.

It attempted to perform a SIP Register Flood on the SIP server.

This IP belongs to UnitedHealth Group.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

This IP belongs to China Mobile.

This IP belongs to Chevron.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

The IP attempted to use the FTP server to distribute malware.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

It persistently tried to exploit weaknesses in the SSH communication encryption.

It attempted to perform a phishing attack using the POP3 server.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

It made multiple requests with the same X-Requested-With header.

The IP attempted to send emails from the IMAP server without authorization.