This IP belongs to Tyson Foods.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

The IP performed regular system foot printing to gain intel on weak points in our server.

Unusually high number of requests to the login page.

Our network security detected the IP spreading malicious macros through document files.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

The IP attempted to use the Mail server to relay spam to other servers.

This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

This IP belongs to MTS (Mobile TeleSystems).

It attempted to use the SSH server as a proxy for other malicious activities.

The IP sent numerous VOIP OPTIONS requests in a short time.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP attempted to perform a downgrade attack on the SSH server.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

It made multiple requests with the same Max-Forwards header.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.