This IP belongs to SingTel.

This IP belongs to United Technologies.

The IP attempted to use the FTP server to distribute malware.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

This IP belongs to Valero Energy.

This IP belongs to Deutsche Telecom.

This IP belongs to Heroku.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

It attempted to send emails with malicious links from the Mail server.

Unusual increase in server CPU usage.

The IP attempted to download emails from the IMAP server without authorization.

This IP belongs to Archer-Daniels-Midland.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

It attempted to perform a password spraying attack on the POP3 server.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

This IP belongs to American Airlines Group.

Unusual patterns in session IDs.

This IP belongs to Google Cloud Services.

The IP has been implicated in multiple cases of URL manipulation attempts.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

It attempted multiple LDAP injection attacks to gain unauthorized access.