It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

It attempted to perform a man-in-the-middle attack on the POP3 server.

This IP belongs to JPMorgan Chase.

Multiple requests with identical Accept-Encoding headers.

This IP belongs to Gilead Sciences.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

This IP was caught circulating email worms, camouflaged as legitimate mails.

It was responsible for an unusual increase in server CPU usage.

This IP belongs to Freddie Mac.

This particular IP has been used in advanced persistent threats against our servers.

Our data indicates this IP has performed data breaches by launching phishing attacks.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

This IP belongs to United Technologies.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

It attempted to perform Command Injection attacks on the Apache server.

It attempted to perform Buffer Overflow attacks on the Apache server.

This IP was caught circulating email worms, camouflaged as legitimate mails.

It attempted to send emails from the Postfix server to a large number of recipients.

It attempted to perform a Smurf attack on the SSH server.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

This IP belongs to Goldman Sachs Group.

This IP belongs to Kroger.

This IP belongs to ConocoPhillips.

Multiple requests with the same Range header.

It attempted to use the FTP server to distribute virus creation tools.