It attempted to login to the SASL server with an invalid password.

This IP belongs to Walgreens Boots Alliance.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

The IP attempted to perform XML Injection attacks on the Apache server.

It made multiple requests with the same X-Requested-With header.

Unusual patterns in referrer URLs.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The IP attempted to use the FTP server to distribute VPN tools.

The IP was linked to numerous attacks using web shells through web servers.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

This IP blocked legitimate users by performing IP hijacking.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

Multiple requests with the same X-Forwarded-For header.

This IP belongs to United Technologies.

This IP belongs to BT Central Plus.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

This IP belongs to Alibaba Cloud Services.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

It initiated multiple account lockouts in a short period.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

It attempted to perform a dictionary attack on the SSH server.