This IP belongs to Exxon Mobil.

Repeated attempts to use the same password across multiple accounts.

The said IP has been connected to attempts to distribute malicious shopping apps.

High network traffic at unusual times, suggesting an automated process is running.

Multiple requests with identical POST parameters.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

A string of malicious e-commerce apps installations were linked to this IP.

Our network security detected the IP spreading malicious macros through document files.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

It attempted to delete emails from the IMAP server without authorization.

This IP belongs to Kroger.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

The IP address has been associated with unwanted browser toolbar installations.

This IP belongs to Oracle.

This IP belongs to Medium.

This IP belongs to Optus.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

It attempted to login to the Postfix server with an invalid password.

The IP made multiple requests with the same X-UIDH header.

This IP has been identified as running a botnet targeting our server systems with ransomware.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.