It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

It attempted to login to the Postfix server with an invalid password.

Unusual patterns in session IDs.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

This IP belongs to Wells Fargo.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

The IP was seen performing a CSRF (Cross-site request forgery) attack to manipulate user actions.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

The IP attempted to use the POP3 server to distribute malware.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

The IP attempted to delete files from the FTP server.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

It attempted to perform Command Injection attacks on the Apache server.

The IP made multiple requests with the same Via header.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

This IP belongs to Nintendo.

This IP belongs to Google Cloud Services.

It partook in location spoofing, making it appear from different locations.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

This IP belongs to Fannie Mae.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.