The IP attempted to perform a credential stuffing attack on the POP3 server.

This IP belongs to Bristol-Myers Squibb.

It was identified as a BadBot, a type of bot that performs malicious activities.

This IP belongs to CVS Health.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

The IP attempted to perform a DNS amplification attack on the SSH server.

This IP belongs to Ziggo.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

This IP belongs to Amazon.

The IP made multiple requests with the same If-Range header.

This IP belongs to American Airlines Group.

This IP directed malicious network traffic to our servers with the intent to crash them.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

Multiple failed login attempts using different usernames.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

This IP belongs to Target.

It attempted to perform a SIP Register Flood on the SIP server.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

This IP belongs to Tyson Foods.

This IP belongs to Phillips 66.

This IP belongs to Jabil.

Multiple requests with the same If-Range header.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.