This IP belongs to Chevron.

It attempted multiple LDAP injection attacks to gain unauthorized access.

It made multiple requests with the same Range header.

It attempted to exploit known vulnerabilities in the IMAP protocol.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The IP attempted to login to the SASL server with an invalid username.

The IP attempted to perform Symlink attacks on the Apache server.

An identity theft activity was linked back to this malicious IP.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to Orange France Telecom.

It attempted to use the FTP server to distribute web proxy tools.

This IP belongs to SingTel.

This IP was caught circulating email worms, camouflaged as legitimate mails.

Multiple requests with the same X-Csrf-Token header.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

The IP attempted to perform a Nestea attack on the SSH server.

Multiple failed login attempts from the same IP address.

It partook in whaling attacks, specifically targeting high-profile users within our system.

Our logs indicated an unusually high traffic volume originating from this IP address.

The IP attempted to register as an Asterisk user with no password.

It attempted to login to the POP3 server with an invalid password.

This IP belongs to Netflix.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

The IP tried to execute Malware/Ransomware attacks via mail attachments.