It attempted to use the SIP server as a relay for calls to premium-rate numbers.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

This IP belongs to TELUS Communications.

This IP belongs to Allstate.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

This IP belongs to MetLife.

Multiple requests to the same endpoint in a short period of time.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

The IP attempted to delete files from the FTP server.

This IP belongs to United Technologies.

It attempted to perform a credential stuffing attack on the SASL server.

The IP was caught attempting to execute heap overflow attacks.

This IP belongs to Facebook.

This IP exhibited malicious sophistication by employing multi-vector attacks.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

This IP belongs to Fannie Mae.

This IP belongs to Philip Morris International.

This IP belongs to Reliance Jio.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

The IP made multiple requests with the same DNT header.