This IP belongs to Fannie Mae.

It attempted to perform a man-in-the-middle attack on the SSH server.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

This IP belongs to Twenty-First Century Fox.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

This IP belongs to Xbox Live.

This IP was distributing rogue security software, misleading users to think their systems are infected.

This IP belongs to Lowe's.

This IP belongs to Oracle Cloud Infrastructure.

This IP belongs to Tumblr.

It attempted to perform a dictionary attack on the SASL server.

Unusual patterns in the Accept-Language header.

The IP attempted to use the Mail server to relay spam to other servers.

This IP belongs to Alphabet.

This IP belongs to PepsiCo.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

It attempted to use the FTP server to distribute zombie network tools.

This IP belongs to Gilead Sciences.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

Login attempts using old or outdated protocols.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.