This IP belongs to Prudential Financial.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

It attempted to use the FTP server to distribute SQL injection tools.

It attempted to flood the SIP server with REGISTER requests.

Multiple failed login attempts from the same IP address in a short span of time.

It attempted to perform a side channel attack on the SSH server.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

The IP attempted to perform a credential stuffing attack on the POP3 server.

Multiple requests with identical Accept-Charset headers.

This IP belongs to Zayo Bandwidth.

This IP has been detected spreading notorious credit card skimmers.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

This IP belongs to Orange France Telecom.

This IP belongs to Berkshire Hathaway.

It attempted to use the FTP server to distribute password cracking tools.

Multiple requests to the same endpoint in a short period of time.

This IP belongs to Telkom SA.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

This IP belongs to Lowe's.

The IP was engaged in port scanning, probing the server for open SSH ports.

The IP attempted to perform Session Hijacking attacks on the Apache server.

It attempted to perform Unvalidated Redirects and Forwards attacks on the Apache server.

It attempted to send emails from the POP3 server without authorization.

It attempted to perform a SIPVicious scan on the SIP server.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.