The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

The IP address generated an unusual increase in network bandwidth usage.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

This IP belongs to CVS Health.

It attempted to perform a SSDP amplification attack on the SSH server.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

It was flagged that this IP had been used in conducting method tampering on our servers.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

This IP belongs to Cardinal Health.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

This IP belongs to PepsiCo.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

It attempted to send emails from the POP3 server without authorization.

Multiple requests with the same X-Forwarded-For header.

The IP attempted to perform a password spraying attack on the SASL server.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

It was found that the IP had deployed rogue security software in our system.

Rapid sequence of login attempts.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

It was found that the IP had deployed rogue security software in our system.

POST /upload.php: An attempt to upload a possibly malicious file.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.