Numerous incidents of botnet infestations were traced back to this offensive IP address.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

It attempted to perform a Teardrop attack on the SSH server.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP attempted to send emails with misleading headers from the Mail server.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

Participated in the notorious Water Torture attack to overload our DNS servers.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

The IP attempted to login to the POP3 server with an invalid username.

This IP belongs to GoDaddy.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

It attempted to take advantage of misconfigurations in the Apache server.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.