This IP belongs to Massachusetts Mutual Life Insurance.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

It attempted to perform a password spraying attack on the POP3 server.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP attempted to use the FTP server to distribute data recovery tools.

It appears that this IP was initiating DNSChanger malware attacks on our network.

Unusual patterns in the sequence of requests.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

Multiple requests to the password reset page.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

The IP address has been involved in distributing adware to our server systems.

This IP belongs to GoDaddy.

The IP attempted to perform a Fraggle attack on the SSH server.

It attempted to use the FTP server to distribute password cracking tools.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

Multiple requests with the same If-Range header.

This IP belongs to Hostgator.

This IP belongs to Telus Communications.

Attempts to access the server using credentials that have been involved in previous security incidents.

The IP attempted to use the SASL server to relay phishing emails.

We observed the IP distributing harmful document tracking tools.

This IP belongs to Goldman Sachs Group.