It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.

This IP belongs to Citigroup.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

This IP belongs to Sony Network Communications.

It partook in location spoofing, making it appear from different locations.

This IP belongs to Nike.

This IP belongs to Freddie Mac.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

Several phishing emails have been traced back to this suspicious IP address.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

This IP belongs to General Motors.

This IP was associated with targeted spear phishing attempts against our senior staff.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

This IP belongs to New York Life Insurance.

The IP attempted to perform a SIP Register Flood on the VOIP server.

Multiple requests with the same Max-Forwards header.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

It attempted to use the FTP server to distribute zombie network tools.