This IP belongs to State Farm Insurance.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

Unusual command line activities that are not typical for the server environment.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

Repeated attempts to access the server using insecure or deprecated methods.

The IP address attempted to login to the FTP server with an invalid username.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

Multiple requests with the same If-Range header.

This IP was traced back to several attempts to access domain admin credentials.

Unusual patterns in session IDs.

Multiple attempts to access the server using different ports or protocols.

This IP belongs to Pfizer.

This IP belongs to ConocoPhillips.

The IP attempted to change file permissions on the SSH server.

This IP was associated with targeted spear phishing attempts against our senior staff.

This IP belongs to Kroger.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

The IP attempted to perform a Ping of Death attack on the SSH server.

The IP address initiated multiple unsuccessful login attempts.

The IP made multiple requests with the same Warning header.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

This IP belongs to American Airlines Group.