The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

Frequent password reset requests.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

This IP belongs to Intel.

This IP exhibited malicious sophistication by employing multi-vector attacks.

The IP attempted to brute force the password to gain mail account access.

GET /admin: Looking for an unprotected admin page.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

This IP belongs to Kroger.

Unusual patterns in user agent strings.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

Several instances of password stealers were traced back to this notorious IP.

This IP belongs to Johnson & Johnson.

This IP belongs to IBM.

The IP attempted to perform a downgrade attack on the SSH server.

This IP belongs to Abbott Laboratories.

The IP was found trying to maliciously clone the SSH certificates for privileged access.

It appears that this IP was initiating DNSChanger malware attacks on our network.

Our system blocked an attempted Code Injection attack from this IP.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

It attempted to use the FTP server to distribute encryption tools.