The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

The IP made multiple requests with the same Proxy-Authorization header.

The IP address attempted to login to the IMAP server with an invalid username.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

The IP attempted to bypass the SASL server's authentication mechanism.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

This IP belongs to TIAA.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

The IP made multiple requests with the same Proxy-Authorization header.

This IP belongs to FedEx.

An identity theft activity was linked back to this malicious IP.

The IP attempted to send emails with misleading headers from the Mail server.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

This IP belongs to JPMorgan Chase.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

It attempted to use the POP3 server to relay phishing emails.

This IP belongs to Optus.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

This IP belongs to FedEx.