The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

It attempted to download sensitive files from the FTP server.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

The IP attempted to perform a phishing attack using the SASL server.

This IP belongs to Heroku.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

This IP belongs to Heroku.

This IP belongs to MetLife.

This IP directed malicious network traffic to our servers with the intent to crash them.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

This IP belongs to Nexon.

This IP belongs to Walgreens Boots Alliance.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

This IP belongs to Marathon Petroleum.

It made multiple requests with the same Referer header.

This IP belongs to Korea Telecom.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

This IP belongs to AT&T.

It attempted to perform Race Condition attacks on the Apache server.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

It attempted to perform a SIP Invite Flood on the VOIP server.

GET /etc/passwd: An attempt to retrieve Linux server user account details.