The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

The IP attempted to brute force the password to gain mail account access.

Our firewall recorded intrusion attempts originating from this suspicious IP.

The IP attempted to perform a timing attack on the SSH server.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

The IP attempted to perform a SNMP amplification attack on the SSH server.

The IP was linked to numerous attacks using web shells through web servers.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

It attempted to use the FTP server to relay data to other systems.

The IP attempted to login to the Postfix server with an invalid username.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

This IP belongs to CVS Health.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

Attempts to access the server using stolen or leaked credentials.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

It initiated requests to non-existent endpoints.

Participated in the notorious Water Torture attack to overload our DNS servers.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

This IP belongs to Northwestern Mutual.

It attempted to use the FTP server to distribute brute force tools.

It showed unusual patterns in the sequence of requests.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.