The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

It attempted to use the FTP server to distribute virus creation tools.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

It attempted to perform a Smurf attack on the SSH server.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

This IP belongs to Marathon Petroleum.

Repeated attempts to use the same password across multiple accounts.

This IP belongs to World Fuel Services.

This IP belongs to Phillips 66.

The IP attempted to use the FTP server to distribute anonymizing tools.

This IP belongs to Chevron.

Our firewall recorded intrusion attempts originating from this suspicious IP.

The IP attempted to perform a credential stuffing attack on the POP3 server.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

It attempted to perform a SIP Register Flood on the Asterisk server.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

It made multiple requests with the same X-Att-Deviceid header.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

Unusual patterns in referrer URLs.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

This IP belongs to NTT Docomo.