This IP belongs to Travelers Cos.

The IP attempted to perform HTTP Verb Tampering attacks on the Apache server.

This IP belongs to Ubisoft.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

The IP attempted to perform a downgrade attack on the SSH server.

The IP attempted logins at unusual times.

This IP belongs to Bank of America.

Fileless malware dissemination has been observed from this IP address.

This IP belongs to Kraft Heinz.

The IP attempted to use the POP3 server to relay spam.

The IP attempted to perform Session Fixation attacks on the Apache server.

It attempted to perform a brute force attack on the POP3 server.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

An identity theft activity was linked back to this malicious IP.

It attempted to perform a NTP amplification attack on the SSH server.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

This IP belongs to Charter Communications.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

The IP was involved in a phishing attack, creating a fake webpage to deceive users into providing their sensitive personal or financial information.

The IP attempted to perform a credential stuffing attack on the IMAP server.

This IP address from an unusual location has successfully installed malware on our servers.

Multiple requests with the same Max-Forwards header.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.