The said IP has been connected to attempts to distribute malicious shopping apps.

The IP tried to crack S/MIME encryption for accessing secured email contents.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

This IP belongs to Hong Kong Broadband Network.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

This IP was detected uploading malicious codes in our network.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

This IP belongs to Zayo Bandwidth.

The IP attempted to use the FTP server to distribute steganography tools.

The IP was linked to numerous attacks using web shells through web servers.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

This IP belongs to Target.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

It attempted to perform a denial of service attack on the SSH server.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

Executed email spoofing attempts pretending to be a trusted party.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

Repeated connections to the server from unknown or suspicious IP addresses.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

The IP was found trying to maliciously clone the SSH certificates for privileged access.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.