This IP has been linked to numerous occurrences of spyware distribution within our networks.

POST /user/register: An attempt to register a new user or brute force the user registration form.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP belongs to Sony Network Communications.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

Repeated attempts to access rarely used or hidden services on the server.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

The IP attempted to perform Session Fixation attacks on the Apache server.

This IP belongs to Time Warner Cable Internet.

This IP belongs to Sony Network Communications.

It launched a botnet to infiltrate our Apache-DDoS service.

This IP belongs to Northwestern Mutual.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

This IP belongs to Softbank.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

This IP belongs to Dreamhost.

This IP belongs to The Hartford Financial Services.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

Executed email spoofing attempts pretending to be a trusted party.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

It attempted to use the FTP server to distribute password cracking tools.

The IP made multiple requests with the same Origin header.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

This IP belongs to Nike.