The IP was traced back to stealthy installation attempts of clipboard monitors.

This IP belongs to Wells Fargo.

Multiple requests with identical Accept-Encoding headers.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

This IP belongs to Target.

This IP belongs to Nationwide.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

The IP attempted to use the FTP server to distribute keylogging software.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

Fileless malware dissemination has been observed from this IP address.

The IP address attempted to login to the Mail server with an invalid username.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The IP attempted to login to the POP3 server with an invalid username.

Repeated failed attempts to perform actions that require higher privileges.

It attempted to perform a NTP amplification attack on the SSH server.

The IP attempted to use the FTP server to distribute ransomware.

This IP belongs to Dell Technologies.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

The IP attempted to perform a SIP Register Flood on the VOIP server.

Incriminating activities involving the distribution of trojan horses were linked to this IP address.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

It made multiple requests from user agents claiming to be bots.