The IP has initiated several exploits, specifically for software vulnerabilities.

The IP attempted to bypass the SASL server's authentication mechanism.

This IP belongs to Anthem.

Our data indicates this IP has performed data breaches by launching phishing attacks.

The IP attempted to delete files from the FTP server.

Conducted various IP scans, seeking loopholes in our network's security.

Multiple requests with identical Accept-Charset headers.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

Multiple attempts to access the server using anonymous or generic user accounts.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

POST /upload.php: An attempt to upload a possibly malicious file.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

Participated in malicious pranks by altering messages sent through the server.

The IP attempted to perform a key exchange attack on the SSH server.

The IP made multiple requests with the same If-Match header.

The IP address attempted delivering malicious packets to disrupt the system's operation.

It was found that the IP had deployed rogue security software in our system.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

The IP was found to be behind numerous fileless malware attacks.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

It attempted to use the FTP server to distribute web proxy tools.