The IP attempted to perform a VOIP Hopper scan on the VOIP server.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

A string of malicious e-commerce apps installations were linked to this IP.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

This IP belongs to Johnson & Johnson.

A dangerous data surveillance spyware was tied back to this IP.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

It attempted to login to the Postfix server with an invalid password.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

This IP belongs to NetEase.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

It launched invasive malware to corrupt crucial segments of our server functionality.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

This IP belongs to Globe Telecom.

This IP belongs to Cardinal Health.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

Several instances of password stealers were traced back to this notorious IP.

It attempted to send emails from the Mail server that violate the server's email content policy.

It attempted to perform a SIPVicious scan on the SIP server.