It attempted to use the FTP server to store illegal content.

This IP belongs to Oracle Cloud Infrastructure.

This IP has been flagged for attempting to escalate privileges in our network.

Multiple requests with the same X-Csrf-Token header.

This IP belongs to CenturyLink.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

Participated in malicious pranks by altering messages sent through the server.

The IP made multiple requests with the same TE header.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

It attempted to perform a Chargen amplification attack on the SSH server.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

This IP belongs to General Electric.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

This IP belongs to IBM.

The IP attempted to register as a VOIP user with no password.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP belongs to Procter & Gamble.

This IP belongs to Verizon Communications.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

It showed unusual patterns in the sequence of requests.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

Damaging activities showing connections to rootkit attacks were associated with this IP.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.