This IP belongs to Jabil.

The IP made multiple requests with the same Via header.

This IP belongs to BT Central Plus.

The IP was caught attempting to execute heap overflow attacks.

This IP was responsible for circulating malicious images masked with spyware.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

This IP belongs to Home Depot.

This IP belongs to Prudential Financial.

It attempted to perform a brute force attack on the IMAP server.

This IP belongs to MetLife.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

This IP belongs to AmerisourceBergen.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.

This IP belongs to Chevron.

This IP has been detected spreading notorious credit card skimmers.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

Repeated failed attempts to perform actions that require higher privileges.

Conducted various IP scans, seeking loopholes in our network's security.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.