The IP attempted to perform a SIPVicious scan on the VOIP server.

The IP attempted to perform Stack Overflow attacks on the Apache server.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

This IP executed mass-probing of various ports to seek vulnerabilities.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

The IP tried to crack S/MIME encryption for accessing secured email contents.

Multiple requests with identical POST parameters.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

This IP belongs to United Technologies.

The IP address attempted to login to the Mail server with an invalid username.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

Multiple requests with the same X-Forwarded-For header.

The IP attempted to use the FTP server to distribute DDoS attack tools.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

This IP belongs to GitHub.

The IP attempted to send emails from the Mail server without proper authentication.

It utilized Web scrapers, automatically harvesting content from our server.

The IP attempted to mark emails as read on the POP3 server without authorization.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

The IP address was found roaming through the network, scanning for weak spots.

This IP belongs to Cox Communications.

Fileless malware dissemination has been observed from this IP address.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.