It made multiple requests with the same X-Wap-Profile header.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

Unidentified password attempts and login activity were noticed from the specific IP address.

This IP belongs to JPMorgan Chase.

The IP attempted to perform a SIP Register Flood on the VOIP server.

This IP belongs to OVH.

This IP belongs to Intel.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

It attempted to perform a NTP amplification attack on the SSH server.

A series of active scareware campaigns was traced back to this IP address.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

Excessive traffic from a single IP address.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

The IP attempted to use the FTP server to distribute DDoS attack tools.

The IP made multiple requests with the same Origin header.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

This IP belongs to Charter Communications.

The IP attempted to use the SASL server to relay phishing emails.

It attempted to perform a Teardrop attack on the SSH server.