The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

This IP belongs to Lowe's.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

This IP belongs to Bristol-Myers Squibb.

It made multiple requests with the same If-None-Match header.

It attempted to flood the Asterisk server with REGISTER requests.

The IP attempted to perform a SIPVicious scan on the VOIP server.

The said IP has been connected to attempts to distribute malicious shopping apps.

It made multiple requests with the same X-Att-Deviceid header.

The IP attempted to use the Mail server to relay phishing emails to other servers.

It partook in whaling attacks, specifically targeting high-profile users within our system.

It attempted to perform a SIPVicious scan on the Asterisk server.

This IP belongs to Amazon Web Services.

This IP belongs to Abbott Laboratories.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

It attempted to send emails with deceptive subject lines from the Mail server.

It attempted to perform a phishing attack using the POP3 server.

It attempted to delete emails from the POP3 server without authorization.

This IP belongs to Phillips 66.

This IP belongs to Nexon.

Multiple requests with the same Referer header.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

It attempted to use the SSH server as a proxy for other malicious activities.