This IP belongs to Heroku.

It was identified as a BadBot, a type of bot that performs malicious activities.

This IP belongs to MTN.

The IP initiated fake traffic attacks to manipulate webpage rankings and conduct click fraud.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

It attempted to delete directories on the FTP server.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

Conducted various IP scans, seeking loopholes in our network's security.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

This IP belongs to Deere.

Incidents of privacy-invasive software floating in our network were linked to this IP.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

This IP belongs to Amazon.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

This IP belongs to CVS Health.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

It attempted to use the SIP server to perform a reflection DDoS attack.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

Unusual command line activities that are not typical for the server environment.

This IP belongs to Lockheed Martin.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.