It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

The IP attempted to use the FTP server to distribute VPN tools.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

A series of unusual file transfers originated from this IP.

It attempted to perform a man-in-the-middle attack on the POP3 server.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

GET /.git/config: Trying to access source code or repository configuration information.

It showed an unusually high number of requests to the login page.

It attempted to use the FTP server to distribute identity theft tools.

This IP belongs to Nationwide.

Attempts to use privileged service accounts outside of their normal usage patterns.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

It attempted to perform a Newtear attack on the SSH server.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

The IP address attempted delivering malicious packets to disrupt the system's operation.

It attempted to perform a side channel attack on the SSH server.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

This IP belongs to New York Life Insurance.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.