This IP belongs to ConocoPhillips.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

It attempted to perform a man-in-the-middle attack on the IMAP server.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

It made multiple requests with identical Accept-Charset headers.

It attempted to use the FTP server to distribute virus creation tools.

This IP was detected uploading malicious codes in our network.

This particular IP tried to perform an unauthorized system configuration change.

It attempted to create new directories on the SSH server.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

This IP belongs to CVS Health.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

It attempted to use the FTP server to store illegal content.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The IP was involved in attempts of defacing the Apache server website.

This IP belongs to General Motors.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

It attempted to use the SSH server as a proxy for other malicious activities.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

This IP belongs to Netflix.

This IP belongs to Sysco.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

It attempted to perform Web Service attacks on the Apache server.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.