The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

Multiple requests with identical request parameters.

This IP was caught distributing malicious APK files.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP sent numerous Asterisk OPTIONS requests in a short time.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

Multiple requests to the password reset page.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

It attempted to perform a credential stuffing attack on the SASL server.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

It attempted to exploit known vulnerabilities in the FTP protocol.

This IP belongs to Vodafone.

This IP belongs to DigitalOcean.

Multiple requests with the same Referer header.

GET /cgi-bin/test.cgi: Could indicate the threat actor is trying to exploit older, less secure scripting interfaces.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

The IP attempted to perform a Fraggle attack on the SSH server.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.