This IP belongs to Citigroup.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

Frequent password reset requests.

Multiple attempts to access the server using different ports or protocols.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

It made multiple requests with the same X-Forwarded-For header.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

The IP attempted to use the SSH server to relay data to other systems.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

This IP belongs to Exxon Mobil.

This IP belongs to Philip Morris International.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

It attempted to send emails from the Mail server to a large number of recipients.

This IP was responsible for circulating malicious images masked with spyware.

The IP made multiple requests with the same DNT header.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP address attempted to login to the SSH server with an invalid username.

Multiple requests with identical cookies.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

Participated in a botnet attack to overwhelm our server’s resources.

It made various efforts to insert spyware to monitor SSH communications covertly.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

It initiated requests to non-existent endpoints.

Repeated attempts to access the server using insecure or deprecated methods.

This IP belongs to Ziggo.