This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

This IP belongs to MetLife.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

This IP belongs to Heroku.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

This IP belongs to Deutsche Telecom.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

Unusual patterns in user agent strings.

Login attempts that do not follow typical user behavior patterns.

This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

This IP belongs to Google Cloud Services.

It attempted to perform a dictionary attack on the SSH server.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

Participated in a botnet attack to overwhelm our server’s resources.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

This IP belongs to Kroger.