The IP attempted to send malware-infected attachments from the Mail server.

It attempted to login to the POP3 server with an invalid password.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

This IP belongs to NTT Docomo.

This IP belongs to American Express.

Our records indicate the IP spread multiple executable infector spyware causing system malfunction.

It attempted to perform a SIP Register Flood on the SIP server.

This IP belongs to The Hartford Financial Services.

This IP belongs to Steam.

This IP belongs to Prudential Financial.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

It attempted to perform Clickjacking attacks on the Apache server.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

This IP belongs to Anthem.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

It attempted to use the Postfix server to relay phishing emails to other servers.

This IP was linked to an attempt at distributing malicious software within our system.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

The IP attempted to perform a SIP Register Flood on the VOIP server.

An identity theft activity was linked back to this malicious IP.

A dangerous data surveillance spyware was tied back to this IP.

This IP was accused of multiple unauthorized removal of security certificates.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.