It attempted to perform a Newtear attack on the SSH server.

This IP belongs to Home Depot.

It attempted to perform a credential stuffing attack on the SSH server.

This IP belongs to American Express.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

The IP attempted to perform a phishing attack using the SASL server.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

It attempted to upload malicious files to the SSH server.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

The IP attempted to mark emails as read on the IMAP server without authorization.

Suspicious Http Referrer Field: HTTP requests with external referrer headers that usually originate from internal source.

HEAD /: May be part of a larger Reconnaissance.

It attempted to perform Session Sidejacking attacks on the Apache server.

Excessive traffic from a single IP address.

Multiple requests with the same Proxy-Connection header.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

This IP belongs to Ubisoft.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

This IP belongs to CVS Health.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

The IP attempted to perform a SIPVicious scan on the VOIP server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This IP belongs to Boeing.

This IP belongs to NTT Docomo.