This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

The IP address has been associated with unwanted browser toolbar installations.

It was discovered illicitly scanning the server for potential vulnerabilities.

This IP belongs to MetLife.

This IP belongs to Xbox Live.

This IP belongs to Dell Technologies.

The IP attempted to use the FTP server to distribute child pornography.

It made multiple requests with the same Range header.

This IP belongs to New York Life Insurance.

This IP belongs to General Electric.

The IP sent numerous VOIP OPTIONS requests in a short time.

This IP belongs to Mondelez International.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

It attempted to send phishing emails from the Mail server.

The IP attempted to perform a QOTD amplification attack on the SSH server.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

It attempted multiple LDAP injection attacks to gain unauthorized access.

Login attempts that do not follow typical user behavior patterns.

It attempted to use the FTP server to distribute password cracking tools.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.