It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

This IP belongs to Prudential Financial.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

It attempted to perform Race Condition attacks on the Apache server.

This IP belongs to Marathon Petroleum.

This IP belongs to Apple.

The IP attempted to perform HTTP Verb Tampering attacks on the Apache server.

This IP belongs to United Parcel Service.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

The IP attempted to perform a dictionary attack on the IMAP server.

This IP belongs to CVS Health.

The IP attempted to delete files from the FTP server.

Multiple failed login attempts from the same IP address in a short span of time.

This IP belongs to Nationwide.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

It initiated requests to non-existent endpoints.

The IP attempted to perform a SIP Register Flood on the VOIP server.

Multiple attempts to access the server using different ports or protocols.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

This IP belongs to Anthem.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

We identified the IP address as a source of numerous scare tactics spyware.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.