The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

It made multiple requests with the same X-Forwarded-For header.

This IP attempted to distribute malicious Javascript files.

It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.

Several instances of aggressive advertising spyware have been linked to this IP.

The IP has been implicated in multiple cases of URL manipulation attempts.

Multiple requests with the same DNT (Do Not Track) header.

This IP belongs to FedEx.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

It attempted to perform Session Prediction attacks on the Apache server.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

We flagged down attempts from the IP to leak backdoor viruses into the system.

This IP belongs to Citigroup.

It attempted to send emails with malicious links from the Postfix server.

It attempted to use the IMAP server to relay spam.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

It tried to execute dictionary attacks on our Mail service causing potential delays.

Several instances of password stealers were traced back to this notorious IP.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

It attempted to perform a replay attack on the SASL server.