This IP belongs to AmerisourceBergen.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

This IP belongs to Cigna.

The IP address made multiple requests with identical request parameters.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

This IP belongs to Alphabet.

This IP belongs to Ford Motor.

It attempted to use the FTP server to distribute zombie network tools.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

Spam contact form on my site (3 times)

spam contact form on my site (3 times)

This IP was detected uploading malicious codes in our network.

This IP belongs to Walmart.

The IP made multiple requests with the same Proxy-Authorization header.

Unusual patterns in user agent strings.

This IP belongs to CenturyLink.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

Incidents of privacy-invasive software floating in our network were linked to this IP.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

The said IP has been connected to attempts to distribute malicious shopping apps.

The IP attempted to download emails from the POP3 server without authorization.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP made multiple requests with identical Accept-Encoding headers.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.