This IP belongs to CenturyLink.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

It attempted to perform a Smurf attack on the SSH server.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

This IP belongs to General Electric.

It attempted to perform a NTP amplification attack on the SSH server.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

The IP attempted to perform a key exchange attack on the SSH server.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

A large number of requests from a single user agent, suggesting an automated process.

It attempted to perform a man-in-the-middle attack on the IMAP server.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

Multiple attempts to access the server using different ports or protocols.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

Multiple requests with the same If-None-Match header.

This IP belongs to BT Central Plus.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

The IP attempted to gain unauthorized access to the Apache server.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.