This IP belongs to Cigna.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

It attempted to send emails from the Postfix server that violate the server's email content policy.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

The IP sent numerous SIP OPTIONS requests in a short time.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

This IP belongs to CVS Health.

Fileless malware dissemination has been observed from this IP address.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

It attempted to exploit known vulnerabilities in the SASL protocol.

Our team discovered that specific IP was distributing intrusive cookie trackers.

This IP belongs to Publix Super Markets.

The IP was involved in a rapid sequence of login attempts.

This IP belongs to Cigna.

Attempts to access the server using stolen or leaked credentials.

The IP attempted to perform a Ping of Death attack on the SSH server.

This particular IP attempted to exploit vulnerabilities in our web applications.

Repeated attempts to access rarely used or hidden services on the server.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

The IP was found to be behind numerous fileless malware attacks.

Multiple requests with the same If-None-Match header.