The IP attempted to perform XML Injection attacks on the Apache server.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

Our team discovered that specific IP was distributing intrusive cookie trackers.

The IP attempted to perform a password spraying attack on the SSH server.

It attempted command injection attacks, hoping to execute unauthorized commands.

The IP attempted to upload malicious files to the FTP server.

It attempted logins using outdated protocols.

The IP address generated an unusual increase in network bandwidth usage.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

The IP was detected attempting to skirt our system's detection through spoofing.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP attempted to use the Mail server to relay phishing emails to other servers.

It attempted to use the SSH server as a proxy for other malicious activities.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

Unusual patterns in user agent strings.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

It was identified as a BadBot, a type of bot that performs malicious activities.

This IP belongs to American Express.

Multiple requests with the same If-Match header.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

This IP belongs to Liberty Mutual Insurance Group.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.