It attempted to perform a Newtear attack on the SSH server.

A majority of our user base received phishing emails originated from this particular IP address.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

Attempts to use automated scripts or tools for password cracking.

Multiple requests with the same If-None-Match header.

The IP address was flagged for employing a packet sniffer on our network.

The IP attempted to send malware-infected attachments from the Postfix server.

This IP belongs to UnitedHealth Group.

This IP belongs to Humana.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

It was discovered illicitly scanning the server for potential vulnerabilities.

This IP was caught conducting cookie-poisoning attack.

The IP attempted to send emails from the Mail server without proper authentication.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The IP was engaged in port scanning, probing the server for open SSH ports.

The IP made multiple requests with the same Warning header.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

This IP belongs to Lockheed Martin.

The IP address has been associated with unwanted browser toolbar installations.

It attempted to perform a phishing attack using the POP3 server.

The IP attempted to perform a downgrade attack on the SSH server.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

The IP made multiple requests to the server's robots.txt file.

The IP attempted to delete files from the FTP server.

This IP belongs to Charter Communications.