This IP belongs to Massachusetts Mutual Life Insurance.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

It attempted to exploit known vulnerabilities in the IMAP protocol.

The IP attempted to perform a replay attack on the IMAP server.

The IP attempted to use the FTP server as a proxy for other malicious activities.

This IP belongs to Home Depot.

The IP attempted to login to the Postfix server with an invalid username.

It attempted to use the FTP server to distribute terrorist propaganda.

It initiated multiple account lockouts in a short period.

This IP belongs to CVS Health.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

Unusual patterns in the sequence of requests.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

It attempted to send phishing emails from the Postfix server.

Multiple requests to the server's robots.txt file.

This IP has been identified as running a botnet targeting our server systems with ransomware.

This IP belongs to Target.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

A sudden surge in the number of requests per second, indicating an automated process.

It attempted to login to the POP3 server with an invalid password.

The IP attempted to use the FTP server to distribute network mapping tools.

This IP belongs to BT Central Plus.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.