the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

We identified the IP address as a source of numerous scare tactics spyware.

The IP attempted to perform a credential stuffing attack on the POP3 server.

It attempted to delete emails from the POP3 server without authorization.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

The IP tried creating false server responses hoping to disrupt the SASL service.

This IP belongs to PepsiCo.

POST /user/register: An attempt to register a new user or brute force the user registration form.

A dangerous data surveillance spyware was tied back to this IP.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

It attempted to use the VOIP server to perform a reflection DDoS attack.

This IP belongs to Anthem.

This IP was detected initiating zero-day exploit attacks on our system.

This IP directed malicious network traffic to our servers with the intent to crash them.

This IP belongs to Proximus.

GET /server-status: Often an attempt to check Apache server status.

This IP belongs to Freddie Mac.

It attempted to send phishing emails from the Mail server.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

Several instances of aggressive advertising spyware have been linked to this IP.

It attempted to send emails with deceptive subject lines from the Postfix server.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.