It made multiple requests with the same Max-Forwards header.

Our team flagged this IP for injecting harmful ActiveX codes.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

Several phishing emails have been traced back to this suspicious IP address.

This IP belongs to Archer-Daniels-Midland.

It attempted to exploit known vulnerabilities in the Postfix software.

It attempted to perform SQL injection attacks through the Apache server.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

The IP address made multiple requests with identical request parameters.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

The IP attempted to perform SOAP Injection attacks on the Apache server.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP attempted to list the contents of directories that it should not have access to.

It attempted to perform a Chargen amplification attack on the SSH server.

GET /backup.sql: Attempting to access a backup of your database.

This IP belongs to Marathon Petroleum.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

It attempted to move emails to different folders on the IMAP server without authorization.

The IP under scrutiny has been associated with multiple modem hijackers.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

Multiple requests with the same Warning header.

Several instances of password stealers were traced back to this notorious IP.