This IP belongs to ConocoPhillips.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

The said IP has been connected to attempts to distribute malicious shopping apps.

The IP attempted to bypass the SASL server's authentication mechanism.

This IP belongs to Globe Telecom.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

Multiple attempts to access the server using anonymous or generic user accounts.

The IP attempted to perform a replay attack on the IMAP server.

This IP belongs to World Fuel Services.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

This IP was involved in deploying stealthy credential stealers in our network.

It attempted to perform a dictionary attack on the SASL server.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

It attempted to take advantage of misconfigurations in the Apache server.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

The IP attempted to list the contents of directories that it should not have access to.

This IP belongs to Exxon Mobil.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

It attempted to use the FTP server to distribute zombie network tools.