The IP attempted to perform a VOIP Hopper scan on the VOIP server.

Multiple requests with the same If-Range header.

This IP belongs to UnitedHealth Group.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

It attempted to perform a man-in-the-middle attack on the SSH server.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

It attempted to change file permissions on the FTP server.

This IP belongs to NTT Docomo.

The IP made multiple requests to the password reset page.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

It attempted to exploit known vulnerabilities in the Postfix software.

This IP belongs to Nintendo.

This IP belongs to Phillips 66.

This IP belongs to Best Buy.

It attempted to perform a SYN flood attack on the SSH server.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

GET /.git/config: Trying to access source code or repository configuration information.

This IP belongs to FedEx.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

Multiple requests with the same Proxy-Connection header.

The IP attempted to perform a brute force attack on the SASL server.

The IP has initiated several exploits, specifically for software vulnerabilities.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

This IP belongs to Sysco.