The IP attempted to login to the Postfix server with an invalid username.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

Multiple requests with the same Proxy-Authorization header.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

It attempted to perform a SIPVicious scan on the SIP server.

It attempted to execute unauthorized commands on the Apache server.

Unusual increase in server CPU usage.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

This IP belongs to McKesson.

Multiple requests with the same Expect header.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

This IP belongs to Massachusetts Mutual Life Insurance.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

Attempts to access the server using stolen or leaked credentials.

The IP attempted to use the FTP server as a proxy for other malicious activities.

This IP belongs to MTN.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

This IP belongs to Chevron.

Repeated attempts to exploit known vulnerabilities in server software.