This IP belongs to United Technologies.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

This IP belongs to Nexon.

It was found initiating attack vectors to exploit SSH agent forwarding.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

Multiple requests with the same DNT (Do Not Track) header.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

The IP attempted to send spam emails from the Postfix server.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

Unusual patterns in the Accept-Language header.

The IP attempted to perform a replay attack on the POP3 server.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

It attempted to exploit known vulnerabilities in the FTP protocol.

The IP attempted to use the FTP server to distribute ransomware.

It attempted to delete emails from the IMAP server without authorization.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

Rapid sequence of login attempts.

A large number of requests from a single user agent, suggesting an automated process.

It attempted to use the FTP server to distribute zombie network tools.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to Korea Telecom.