This IP belongs to BT Central Plus.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

Multiple attempts to access the server using encrypted tunnels or proxies.

This IP exhibited malicious sophistication by employing multi-vector attacks.

This IP belongs to Berkshire Hathaway.

This IP belongs to Bank of America.

This IP belongs to MetLife.

This IP belongs to IBM.

It attempted to exploit known vulnerabilities in the IMAP protocol.

It attempted to use the Postfix server to relay spam to other servers.

It partook in location spoofing, making it appear from different locations.

The IP attempted to execute unauthorized commands on the SSH server.

It attempted to use the FTP server to distribute encryption tools.

GET /db/finance.dump: An attempt to access a database dump file.

Multiple requests with the same Via header.

GET /db/finance.dump: An attempt to access a database dump file.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

It attempted logins using outdated protocols.

It was flagged that this IP had been used in conducting method tampering on our servers.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

This IP belongs to Sony Network Communications.

It attempted to perform a SIP Invite Flood on the VOIP server.