The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

The IP attempted to use the FTP server to distribute VPN tools.

It attempted to use the FTP server to distribute network scanning tools.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

This IP belongs to NTT Docomo.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

It attempted to perform a man-in-the-middle attack on the POP3 server.

Multiple requests with the same Proxy-Connection header.

It attempted to delete emails from the POP3 server without authorization.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

It partook in location spoofing, making it appear from different locations.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

This IP belongs to McKesson.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

This IP belongs to American Express.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

This IP belongs to Anthem.

It sent SIP INVITE requests to non-existent extensions.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

This IP belongs to Home Depot.