This IP belongs to AT&T.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

This IP belongs to Northwestern Mutual.

This IP belongs to McKesson.

Multiple HTTP 401 Status Codes: This could indicate someone is repeatedly attempting to access resources that require valid credentials, possibly attempting to brute-force their way in.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

The IP address made multiple requests with identical request parameters.

This IP belongs to Chevron.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

The IP address has been linked to the creation of artificial traffic to crash our website.

It attempted to perform a Steam protocol amplification attack on the SSH server.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

Unusual patterns of behavior, such as login attempts at regular intervals or sequential patterns in the attempted passwords.

Repeated attempts to use the same password across multiple accounts.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

This IP belongs to Citigroup.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

The IP address was flagged for employing a packet sniffer on our network.

This IP belongs to Chevron.

This IP belongs to TIAA.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

This IP has been detected spreading notorious credit card skimmers.

The IP attempted logins at unusual times.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.