It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

The IP attempted to use the FTP server to distribute child pornography.

It attempted to perform Session Prediction attacks on the Apache server.

Unusual network traffic patterns, such as a high amount of outbound traffic.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

Multiple requests with the same X-UIDH header.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

It attempted to send emails from the Postfix server to a large number of recipients.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

The IP address attempted delivering malicious packets to disrupt the system's operation.

This IP belongs to Walmart.

This IP belongs to Freddie Mac.

Attempts to access the server using unusual HTTP methods or request types.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

This IP belongs to Verizon.

This IP belongs to Publix Super Markets.

GET /configuration.php.old: Trying to locate backup configuration files.

The IP attempted to perform Session Replay attacks on the Apache server.

A string of malicious e-commerce apps installations were linked to this IP.

It showed an unusually high number of requests to the login page.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

It attempted to use the VOIP server to perform a reflection DDoS attack.