This IP belongs to MetLife.

This IP belongs to MetLife.

This IP belongs to Publix Super Markets.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

Participated in a botnet attack to overwhelm our server’s resources.

It attempted to perform a SSDP amplification attack on the SSH server.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

Multiple requests with identical Accept-Charset headers.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

Multiple requests with the same Expect header.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

The IP attempted to use the FTP server to distribute secure deletion tools.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

It attempted to perform a SIP Invite Flood on the VOIP server.

This IP belongs to Telkom SA.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP belongs to Dow Chemical.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

Unknown source code changes in our system were linked back to this offensive IP address.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.