This IP belongs to Canadian Department of Defense.

This IP belongs to AT&T.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

Participated in a botnet attack to overwhelm our server’s resources.

This IP belongs to Target.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

This IP belongs to General Dynamics.

The IP made multiple requests with the same If-Range header.

Attempts to access the server using stolen or leaked credentials.

It attempted to use the Postfix server to relay spam to other servers.

It made various efforts to insert spyware to monitor SSH communications covertly.

It attempted to use the FTP server to distribute pirated software.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

This IP belongs to NTT Docomo.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

It attempted to perform Command Injection attacks on the Apache server.

It attempted to exploit known vulnerabilities in the POP3 protocol.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

This IP belongs to Chevron.

The IP attempted to use the SSH server to relay data to other systems.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.