This IP belongs to State Farm Insurance.

This IP belongs to United Continental Holdings.

The IP made multiple requests with the same DNT header.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

The IP was engaged in port scanning, probing the server for open SSH ports.

This IP belongs to Sony Network Communications.

It engaged in a click fraud operation using our server’s communication channels.

Multiple requests with identical Accept-Encoding headers.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

This IP belongs to Boeing.

The IP sent numerous VOIP OPTIONS requests in a short time.

It made multiple requests with the same X-Forwarded-For header.

It attempted to perform XPath Injection attacks on the Apache server.

This IP belongs to The Hartford Financial Services.

This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

GET /.git/config: Trying to access source code or repository configuration information.

GET /../htpasswd: Trying to access password files using directory traversal.

This IP was involved in deploying stealthy credential stealers in our network.

This IP belongs to Anthem.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

It attempted to use the FTP server to distribute password recovery tools.

Repeated attempts to use the same password across multiple accounts.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.