The IP address was found roaming through the network, scanning for weak spots.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

It attempted to use the FTP server to distribute password cracking tools.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

It attempted to use the SSH server as a proxy for other malicious activities.

The IP made multiple requests with the same Origin header.

It attempted to perform a SIP Invite Flood on the VOIP server.

It made multiple requests with the same Expect header.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

Login attempts from foreign IP addresses.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

We identified the IP address as a source of numerous scare tactics spyware.

The suspicious IP attempted to introduce spyware under the guise of software updates.

The IP attempted to use the FTP server to distribute child pornography.

This IP belongs to Chevron.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

It attempted to perform a SIP Register Flood on the SIP server.

It attempted to perform Session Sidejacking attacks on the Apache server.

It made multiple requests with the same Range header.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

The IP attempted to delete files from the FTP server.

This IP belongs to TJX.