Numerous incidents of botnet infestations were traced back to this offensive IP address.

The IP attempted to login to the Postfix server with an invalid username.

Multiple requests with identical POST parameters.

This IP directed malicious network traffic to our servers with the intent to crash them.

It attempted to perform a Newtear attack on the SSH server.

GET /server-status: Often an attempt to check Apache server status.

This IP belongs to Wells Fargo.

This IP belongs to United Parcel Service.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

Multiple requests with the same Referer header.

This IP belongs to Ubisoft.

It attempted to perform a Steam protocol amplification attack on the SSH server.

This IP belongs to Dow Chemical.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

This IP belongs to Nike.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

GET /vuln.html: Looking for any page vulnerabilities.

Unusually high number of requests to the login page.

It sent SIP INVITE requests to non-existent extensions.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

The IP made multiple requests to the password reset page.

The IP attempted to use the SSH server to relay data to other systems.

The IP attempted to perform a timing attack on the SSH server.

The IP made multiple requests to the password reset page.