This IP belongs to Dow Chemical.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

The IP attempted to perform a password spraying attack on the SSH server.

This IP belongs to 3M.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

Attempts to use automated scripts or tools for password cracking.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

The IP attempted to use the Mail server to relay spam to other servers.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

It attempted to use the IMAP server to relay spam.

It attempted to upload malicious files to the SSH server.

Unusual patterns of behavior, such as login attempts at regular intervals or sequential patterns in the attempted passwords.

The IP attempted to mark emails as read on the IMAP server without authorization.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP attempted to perform Session Hijacking attacks on the Apache server.

Unexpected changes in the server configuration or installed software.

The IP made multiple requests with the same Proxy-Authorization header.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

This IP belongs to Dreamhost.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

This IP belongs to Facebook.