It attempted to perform Race Condition attacks on the Apache server.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

This IP belongs to Tyson Foods.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

GET /vuln.html: Looking for any page vulnerabilities.

This IP belongs to Citigroup.

Multiple attempts to access the server using anonymous or generic user accounts.

This IP belongs to American Airlines Group.

This IP belongs to Tech Data.

It attempted to perform a SYN flood attack on the SSH server.

This IP was responsible for circulating malicious images masked with spyware.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

The IP attempted to login to the SASL server with an invalid username.

The IP has been implicated in multiple cases of URL manipulation attempts.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

Repeated failed attempts to perform actions that require higher privileges.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

It attempted to use the FTP server to distribute terrorist propaganda.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

The IP was found trying to maliciously clone the SSH certificates for privileged access.

This IP belongs to Ziggo.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

This IP belongs to CenturyLink.