This IP belongs to TIAA.

Attempts to access the server using unusual HTTP methods or request types.

It attempted to perform a SIP Register Flood on the SIP server.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

Multiple requests with the same Origin header.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.

The IP's involvement in spreading password stealers has compromised our network's protection.

This IP belongs to DuPont de Nemours.

The IP attempted to use the FTP server to distribute ransomware.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

Incidents of privacy-invasive software floating in our network were linked to this IP.

The IP attempted to perform Format String attacks on the Apache server.

It made multiple requests with the same Max-Forwards header.

This IP belongs to McKesson.

It attempted to delete directories on the FTP server.

This IP belongs to Plusnet.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

Multiple requests with the same Range header.

It attempted to perform a side channel attack on the SSH server.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

This IP belongs to Walmart.

This IP belongs to MetLife.

It attempted to use the Postfix server to relay spam to other servers.

This IP belongs to Pfizer.