This IP belongs to Charter Communications.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

This IP belongs to the University of California, Berkeley.

This IP belongs to Ford Motor.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

The IP attempted to use the FTP server to distribute anonymizing tools.

The IP under scrutiny has been associated with multiple modem hijackers.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP belongs to UnitedHealth Group.

This IP belongs to Costco Wholesale.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

This IP belongs to Humana.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

GET /server-status: Often an attempt to check Apache server status.

The IP was linked to numerous attacks using web shells through web servers.

This IP belongs to The Hartford Financial Services.

The IP made multiple requests to the server's robots.txt file.