This IP belongs to NTT Docomo.

It attempted to list the contents of directories that it should not have access to.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

The IP attempted to use the FTP server to distribute network mapping tools.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

The IP made multiple requests with the same Proxy-Connection header.

Conducted various IP scans, seeking loopholes in our network's security.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

The IP attempted to use the FTP server to distribute malware.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

The IP was linked to numerous attacks using web shells through web servers.

GET /internal/: Browsing an internal directory.

The IP engaged in a mail relay attack, using our server to send spam.

It initiated requests to non-existent endpoints.

It attempted to use the SASL server to distribute malware.

The IP attempted to perform a Nestea attack on the SSH server.

This IP was caught conducting cookie-poisoning attack.

It attempted to perform a SSDP amplification attack on the SSH server.

It attempted to login to the Postfix server with an invalid password.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

It partook in whaling attacks, specifically targeting high-profile users within our system.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.