The IP attempted to perform a SIP Invite Flood on the SIP server.

It showed an unusually high number of requests to the login page.

The IP attempted to use the FTP server to distribute forensics tools.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

It attempted to perform a credential stuffing attack on the SSH server.

Multiple requests with the same Origin header.

It made multiple requests with the same Max-Forwards header.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

The said IP has been connected to attempts to distribute malicious shopping apps.

The IP attempted to perform a SIPVicious scan on the VOIP server.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

It attempted to use the SASL server to distribute malware.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

It attempted to perform a Smurf attack on the SSH server.

This IP belongs to JPMorgan Chase.

It attempted to perform Buffer Overflow attacks on the Apache server.

It attempted to perform a SIP Register Flood on the SIP server.