Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

It attempted to perform Session Sidejacking attacks on the Apache server.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

The IP attempted to use the FTP server to distribute ransomware.

It sent VOIP requests to non-existent extensions.

This IP belongs to Mondelez International.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

This IP belongs to Honeywell International.

This IP belongs to PepsiCo.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

Multiple requests to the password reset page.

This IP belongs to IBM Cloud Services.

It attempted to use the SASL server to relay spam.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

The IP attempted to login to the Postfix server with an invalid username.

This IP belongs to Lowe's.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

This IP belongs to Nike.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

It attempted to perform a Steam protocol amplification attack on the SSH server.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

It attempted to perform a brute force attack on the POP3 server.

The IP has been implicated in multiple cases of URL manipulation attempts.