The IP attempted to mark emails as read on the IMAP server without authorization.

This IP attempted to disrupt our systems through the propagation of worms.

It made multiple requests with the same X-Forwarded-For header.

The IP attempted to send emails with misleading headers from the Mail server.

Multiple failed login attempts using different usernames.

The IP attempted to bypass the SASL server's authentication mechanism.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

This IP belongs to World Fuel Services.

This IP belongs to Massachusetts Mutual Life Insurance.

The IP made multiple requests with the same Warning header.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

Multiple requests with the same X-Requested-With header.

The IP attempted to use the FTP server to distribute secure deletion tools.

This IP belongs to UnitedHealth Group.

It attempted to exploit known vulnerabilities in the IMAP protocol.

This IP belongs to FedEx.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

Multiple requests with the same Range header.

The IP attempted to perform a distributed denial of service attack on the SSH server.

Our team flagged this IP for injecting harmful ActiveX codes.

The IP attempted to perform Session Replay attacks on the Apache server.

Attempts to use privileged service accounts outside of their normal usage patterns.

Unusual patterns in referrer URLs.

It tried to execute dictionary attacks on our Mail service causing potential delays.

The IP was detected while sending out malicious spyware-infected emails.