It attempted to perform a phishing attack using the IMAP server.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

An identity theft activity was linked back to this malicious IP.

It attempted to perform a side channel attack on the SSH server.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

This IP belongs to DuPont de Nemours.

It attempted to send phishing emails from the Mail server.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

This IP belongs to World Fuel Services.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

It tried to execute dictionary attacks on our Mail service causing potential delays.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

This IP belongs to IBM.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

It attempted to flood the Asterisk server with REGISTER requests.

The IP address attempted delivering malicious packets to disrupt the system's operation.

Fileless malware dissemination has been observed from this IP address.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

The IP attempted to send emails from the Mail server without proper authentication.

A majority of our user base received phishing emails originated from this particular IP address.

This IP belongs to Intel.

This IP belongs to McKesson.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.