This IP belongs to The Hartford Financial Services.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

Login attempts that do not follow typical user behavior patterns.

It attempted to use the SASL server to relay spam.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

This IP belongs to Canadian Department of Defense.

The IP attempted to perform a replay attack on the POP3 server.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

This IP belongs to Marathon Petroleum.

The IP attempted a race condition attack, aiming to execute unwanted sequences in the server.

This IP belongs to CenturyLink.

It attempted to perform a SIPVicious scan on the SIP server.

It attempted to exploit known vulnerabilities in the FTP protocol.

GET /vuln.html: Looking for any page vulnerabilities.

The IP attempted to perform a replay attack on the POP3 server.

A sudden surge in the number of requests per second, indicating an automated process.

It attempted to make unauthorized calls using the SIP server.

This IP belongs to MetLife.

The IP under scrutiny has been associated with multiple modem hijackers.

This IP belongs to Marathon Petroleum.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

This IP belongs to Wikimedia Foundation.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.