The IP has initiated several exploits, specifically for software vulnerabilities.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

The IP attempted to use the FTP server to distribute malware.

It made multiple requests with the same Range header.

It attempted to exploit known vulnerabilities in the SASL protocol.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

This IP belongs to Cardinal Health.

This IP belongs to Amazon.

This IP belongs to PepsiCo.

Multiple requests with the same Max-Forwards header.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

The IP attempted to perform a password spraying attack on the SSH server.

The IP attempted to download sensitive files from the SSH server.

Multiple requests with identical Accept-Charset headers.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

The IP attempted to send emails from the IMAP server without authorization.

Unusual system or application errors related to authentication or access controls.