This IP belongs to Archer-Daniels-Midland.

The IP attempted to perform a credential stuffing attack on the POP3 server.

This IP belongs to DuPont de Nemours.

This IP executed mass-probing of various ports to seek vulnerabilities.

This IP belongs to Archer-Daniels-Midland.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

The IP attempted to perform a SIP Register Flood on the VOIP server.

Multiple requests with the same If-Range header.

This IP belongs to JPMorgan Chase.

The IP attempted to register as a SIP user with no password.

It showed unusual activity in the server's error logs.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

It attempted to perform a dictionary attack on the SSH server.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

This IP belongs to American Airlines Group.

This IP belongs to Cigna.

It attempted to create new directories on the SSH server.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

It attempted to use the SIP server to perform a reflection DDoS attack.

It made multiple requests with the same Range header.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.