The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

This IP belongs to Exxon Mobil.

Multiple requests with the same Referer header.

The IP attempted to download sensitive files from the Apache server.

It attempted to use the FTP server to distribute SQL injection tools.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

This IP belongs to Canadian Department of Defense.

This IP belongs to Tyson Foods.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

It attempted to perform a Smurf attack on the SSH server.

It attempted to send emails from the POP3 server without authorization.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

This IP belongs to Nintendo.

Several phishing emails have been traced back to this suspicious IP address.

This IP belongs to Sysco.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

This IP belongs to MTN.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

This IP belongs to Verizon Communications.

This IP belongs to Ziggo.

This IP was traced back to several attempts to access domain admin credentials.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

The IP attempted to perform a SIPVicious scan on the VOIP server.