It sent VOIP requests to non-existent extensions.

This IP belongs to Gilead Sciences.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

This IP belongs to Honeywell International.

This IP belongs to NTT Docomo.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The IP made multiple requests with the same DNT header.

This IP belongs to Berkshire Hathaway.

Our logs indicated an unusually high traffic volume originating from this IP address.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

It attempted to use the IMAP server to relay spam.

This IP belongs to New York Life Insurance.

This IP belongs to Rogers Cable.

This IP belongs to Walmart.

This IP belongs to Pinterest.

The IP attempted to register as an Asterisk user with no password.

Identification of Known Vulnerabilities: Attempts to exploit known vulnerabilities related to your server application.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.