It tried to execute dictionary attacks on our Mail service causing potential delays.

The IP has initiated several exploits, specifically for software vulnerabilities.

This IP belongs to Verizon.

This IP belongs to Ford Motor.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

Repeated Unique 404 Errors: Logs revealing a steady stream of unique 404 errors could suggest a DDoS attack aiming to exhaust storage resources.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

This IP has been flagged for attempting to escalate privileges in our network.

This IP belongs to Comcast.

It partook in whaling attacks, specifically targeting high-profile users within our system.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

The IP under scrutiny has been associated with multiple modem hijackers.

Multiple failed login attempts from the same IP address in a short span of time.

This IP belongs to Marathon Petroleum.