The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

POST /user/register: An attempt to register a new user or brute force the user registration form.

The IP made multiple requests to the server's robots.txt file.

The IP attempted to use the FTP server to distribute hacking tutorials.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

It made multiple requests with the same Referer header.

The IP address attempted to login to the SSH server with an invalid username.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP belongs to Rogers Cable.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

This IP belongs to Korea Telecom.

This IP belongs to Lockheed Martin.

Incidents of privacy-invasive software floating in our network were linked to this IP.

The IP attempted to perform a SIPVicious scan on the VOIP server.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

The IP address attempted to register as a SIP user with an invalid username.

This IP belongs to FedEx.

Login attempts using old or outdated protocols.

This IP belongs to AmerisourceBergen.

It attempted to perform a Sentinels amplification attack on the SSH server.

The IP attempted to perform Session Fixation attacks on the Apache server.

It attempted to use the FTP server to distribute traffic monitoring tools.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.