This IP belongs to MTS (Mobile TeleSystems).

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

It made multiple requests with the same If-None-Match header.

It attempted to perform Clickjacking attacks on the Apache server.

The IP attempted to use the FTP server to distribute DDoS attack tools.

The IP attempted to register as a VOIP user with no password.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

It attempted to login to the SSH server with an invalid password.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

The IP showed unusual patterns in session IDs.

Our system blocked an attempted Code Injection attack from this IP.

This IP belongs to Wells Fargo.

This IP belongs to Tyson Foods.

The IP attempted to create new directories on the FTP server.

The IP attempted logins at unusual times.

The IP was linked to numerous attacks using web shells through web servers.

GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

This IP was caught distributing malicious APK files.

This IP belongs to Valero Energy.

It attempted to delete directories on the FTP server.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

This IP was found responsible for a session hijacking attempt on our network.

This IP belongs to Exxon Mobil.