This IP belongs to Comcast.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.

The IP made multiple requests with the same If-Range header.

This IP belongs to Costco Wholesale.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

It attempted to send emails from the Mail server that violate the server's usage policy.

It attempted to use the FTP server to distribute phishing emails.

This IP address is sending spoof emails threatening and ransom demands claiming they have explicit videos and demanding money, using Pegasus

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

It attempted to perform Web Service attacks on the Apache server.

This IP belongs to Alphabet.

This IP belongs to UnitedHealth Group.

This IP belongs to Softbank.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

This IP belongs to TIAA.

It attempted to take advantage of misconfigurations in the Apache server.

It attempted to perform a Chargen amplification attack on the SSH server.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

It attempted to perform a SIP Invite Flood on the VOIP server.

It attempted to perform a dictionary attack on the SASL server.

There were several attempts from this IP to manipulate our server DNS records.

This IP belongs to Morgan Stanley.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.