This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Several phishing emails have been traced back to this suspicious IP address.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

This IP belongs to Telkom SA.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

It attempted to send emails from the Mail server to a large number of recipients.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

It attempted to use the POP3 server to relay phishing emails.

Multiple requests with the same TE (Transfer Encoding) header.

It attempted to use the SASL server to relay spam.

This IP belongs to IBM.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

It attempted to perform a SSDP amplification attack on the SSH server.

This IP belongs to the United States Department of Defense.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

Our system flagged this IP as conducting fraudulent transactions activities.

This IP belongs to Slack.

This IP belongs to Nike.

This IP belongs to Lowe's.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

The IP was recorded making persistent attempts to crack our encryption.

It attempted to perform a password spraying attack on the POP3 server.

This IP belongs to General Electric.