The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

Attempts to access the server using stolen or leaked credentials.

Our data indicates this IP has performed data breaches by launching phishing attacks.

This IP belongs to TIAA.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

The IP sent numerous Asterisk OPTIONS requests in a short time.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

The IP made multiple requests with the same Origin header.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

Multiple login attempts from different geographical locations in a short period of time.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

The IP attempted to use the SASL server to relay phishing emails.

This IP belongs to Freddie Mac.

It attempted to perform a Smurf attack on the SSH server.

Multiple requests with the same Warning header.

The IP address has been linked to the creation of artificial traffic to crash our website.

Multiple requests with the same Origin header.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

The IP attempted to perform a brute force attack on the SSH server.