The IP attempted to perform Format String attacks on the Apache server.

This IP belongs to Microsoft.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

High network traffic at unusual times, suggesting an automated process is running.

It utilized Web scrapers, automatically harvesting content from our server.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

The IP showed unusual patterns in referrer URLs.

This IP belongs to AT&T.

This IP belongs to Walgreens Boots Alliance.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

The IP made multiple unsuccessful login attempts in a short period of time.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

This IP belongs to Google Cloud Services.

This IP belongs to Kraft Heinz.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

This IP belongs to Wells Fargo.

The IP attempted to use the FTP server to distribute child pornography.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

This IP belongs to Microsoft.

Incriminating activities involving the distribution of trojan horses were linked to this IP address.

This IP belongs to 3M.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

It was flagged that this IP had been used in conducting method tampering on our servers.