The IP was caught attempting to execute heap overflow attacks.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

It attempted to flood the SIP server with REGISTER requests.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

This IP belongs to Berkshire Hathaway.

Unexpected changes in the server configuration or installed software.

This IP belongs to Boeing.

Unusual patterns in session IDs.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

This IP belongs to Slack.

The IP attempted to perform a replay attack on the SSH server.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

It made multiple requests with the same Max-Forwards header.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

It attempted to move emails to different folders on the IMAP server without authorization.

This IP belongs to Vodacom.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

The IP has been implicated in multiple cases of URL manipulation attempts.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

The IP attempted to download sensitive files from the SSH server.

This IP belongs to Walgreens Boots Alliance.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

This IP belongs to Vodacom.

This IP belongs to The Walt Disney Company.

It attempted to use the FTP server to distribute brute force tools.