The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

This IP belongs to Bell Canada.

This IP belongs to CVS Health.

This IP exhibited malicious sophistication by employing multi-vector attacks.

It made multiple requests with the same Max-Forwards header.

This IP belongs to Home Depot.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

It attempted to use the FTP server to distribute network scanning tools.

The IP attempted to register as a VOIP user with no password.

Unusual patterns in session IDs.

The IP showed unusual patterns in session IDs.

The IP attempted to use the FTP server to distribute child pornography.

This IP belongs to Vodafone.

The IP made multiple requests with the same If-Match header.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

This IP belongs to Massachusetts Mutual Life Insurance.

GET /configuration.php.old: Trying to locate backup configuration files.

The IP was linked to numerous attacks using web shells through web servers.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

This IP belongs to Fannie Mae.

It attempted to move emails to different folders on the IMAP server without authorization.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.