This IP belongs to Home Depot.

This IP belongs to Valero Energy.

This IP belongs to Oracle.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This IP belongs to Shaw Communications.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

It attempted to send emails with deceptive subject lines from the Postfix server.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

This IP belongs to Abbott Laboratories.

It attempted to perform a man-in-the-middle attack on the POP3 server.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

The IP attempted to perform a Fraggle attack on the SSH server.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

It attempted to perform Session Sidejacking attacks on the Apache server.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

This IP belongs to Kroger.