The IP under scrutiny has been associated with multiple modem hijackers.

This IP belongs to Deutsche Telekom AG.

Multiple requests with the same If-Range header.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

This IP belongs to Lockheed Martin.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

This IP belongs to the United States Department of Defense.

This IP belongs to AmerisourceBergen.

The IP address generated an unusual increase in network bandwidth usage.

This IP belongs to FedEx.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

This IP belongs to Alibaba Cloud Services.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

This IP belongs to Time Warner Cable Internet.

This IP belongs to Northwestern Mutual.

The IP address attempted to exploit known vulnerabilities in server software.

The IP attempted to perform a SIP Register Flood on the VOIP server.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It attempted to perform SQL injection attacks through the Apache server.

The IP showed unusual patterns in referrer URLs.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

This IP belongs to Wells Fargo.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.