This IP belongs to Deere.

This IP belongs to Procter & Gamble.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

This IP belongs to Cardinal Health.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

This IP belongs to Fannie Mae.

It attempted to upload malicious scripts to the Apache server.

It attempted phishing scams by sending malicious mails through compromised accounts.

This IP belongs to UnitedHealth Group.

It attempted to login to the SASL server with an invalid password.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

It sent SIP INVITE requests to non-existent extensions.

It attempted to use the FTP server to relay data to other systems.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

This IP belongs to General Motors.

Unusual patterns in session IDs.

Multiple requests with the same Range header.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

The IP attempted to perform a Fraggle attack on the SSH server.

GET /admin: Looking for an unprotected admin page.