This IP belongs to Cigna.

This IP belongs to Slack.

This IP belongs to British Telecommunications.

The malicious IP tried to brute force its way into the SASL authentication process.

GET /login.action: Trying to find a Struts2 application to exploit.

This IP belongs to Zayo Bandwidth.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

This IP belongs to JPMorgan Chase.

The IP attempted to create new directories on the FTP server.

The IP attempted to mark emails as read on the POP3 server without authorization.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

The IP attempted to use the FTP server to distribute spam.

The said IP has been connected to attempts to distribute malicious shopping apps.

This IP belongs to 3M.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

The IP was traced back to stealthy installation attempts of clipboard monitors.

The IP has initiated several exploits, specifically for software vulnerabilities.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.

Multiple requests with the same Expect header.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This IP belongs to Boeing.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

Multiple requests with the same DNT (Do Not Track) header.