The IP maliciously used packet sniffers in attempts to decode SSH traffic.

GET /setup.php: Effort to locate setup files for PHP applications.

This IP belongs to AmerisourceBergen.

This IP belongs to Phillips 66.

It made multiple requests with the same X-Att-Deviceid header.

This particular IP attempted to exploit vulnerabilities in our web applications.

This IP belongs to United Technologies.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

This IP belongs to Slack.

This IP belongs to Tyson Foods.

This IP belongs to FedEx.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

This IP belongs to MetLife.

The IP address attempted to register as a SIP user with an invalid username.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

This IP belongs to GitHub.

It attempted to perform a Land attack on the SSH server.

Executed email spoofing attempts pretending to be a trusted party.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

This IP belongs to Alibaba Cloud Services.

This IP belongs to CenturyLink.