The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

This IP belongs to Home Depot.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

Multiple requests with the same Warning header.

A dangerous data surveillance spyware was tied back to this IP.

It attempted to perform a phishing attack using the POP3 server.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

The IP showed unusual patterns in session IDs.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

It attempted to perform IP Spoofing attacks on the Apache server.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

It attempted to use the POP3 server to relay phishing emails.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

This IP belongs to Nintendo.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

It attempted to login to the Postfix server with an invalid password.

This IP belongs to Dow Chemical.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

The IP made multiple requests with identical Accept-Encoding headers.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

The IP address was flagged for employing a packet sniffer on our network.

This IP belongs to Target.