The IP made multiple requests to the password reset page.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

This IP belongs to Allstate.

This IP belongs to Amazon.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

Damaging activities showing connections to rootkit attacks were associated with this IP.

It attempted to perform a phishing attack using the POP3 server.

This IP belongs to Virgin Media.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

It attempted to make unauthorized calls using the VOIP server.

It attempted to use the FTP server to distribute brute force tools.

The IP attempted to use the FTP server to distribute credit card fraud tools.

This IP belongs to Kroger.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

It launched header-based exploits, attempting to manipulate HTTP headers to cause inappropriate server responses.

The IP has been implicated in multiple cases of URL manipulation attempts.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

It attempted to send emails from the Postfix server that violate the server's usage policy.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.