This IP belongs to Sysco.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

This IP belongs to IBM Cloud Services.

This IP belongs to AmerisourceBergen.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to State Farm Insurance.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

The IP was flagged for attempting dictionary attacks on our user accounts.

This IP belongs to Berkshire Hathaway.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

It attempted to login to the IMAP server with an invalid password.

The IP sent numerous SIP OPTIONS requests in a short time.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

Participated in the notorious Water Torture attack to overload our DNS servers.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

Unusual system or application errors related to authentication or access controls.

This IP belongs to Facebook.

This IP address from an unusual location has successfully installed malware on our servers.

The IP attempted to download emails from the POP3 server without authorization.

Multiple failed attempts to use the server’s API.