This IP belongs to IBM.

The IP attempted to use the FTP server to distribute data recovery tools.

This particular IP tried to perform an unauthorized system configuration change.

Participated in the notorious Water Torture attack to overload our DNS servers.

It attempted to send emails from the Mail server that violate the server's usage policy.

This IP belongs to T-Mobile.

This IP belongs to Chevron.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

It attempted to use the FTP server to distribute password cracking tools.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

This IP belongs to Time Warner Cable Internet.

It made multiple requests with the same X-Csrf-Token header.

Frequent password reset requests.

This IP belongs to Google Cloud Services.

The IP attempted to perform a password spraying attack on the SSH server.

It attempted to use the IMAP server to relay spam.

This IP belongs to Citigroup.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

This IP belongs to Virgin Media.

This IP belongs to Cox Communications.

This IP belongs to United Technologies.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.