Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It attempted to perform Command Injection attacks on the Apache server.

This IP belongs to General Motors.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

This IP belongs to Verizon Communications.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

It made multiple requests with identical POST parameters.

Constant spam from this domain

It attempted to create new directories on the SSH server.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

This IP belongs to Humana.

The IP attempted to download emails from the POP3 server without authorization.

This IP belongs to General Electric.

There were several attempts from this IP to manipulate our server DNS records.

This IP belongs to Pfizer.

This IP belongs to State Farm Insurance.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

It sent VOIP requests to non-existent extensions.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

Unknown source code changes in our system were linked back to this offensive IP address.