The IP showed unusual patterns in session IDs.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

It attempted to send emails from the Postfix server that violate the server's usage policy.

The IP made multiple requests with the same If-Match header.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

This IP belongs to Telkom SA.

We observed the IP distributing harmful document tracking tools.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

This IP belongs to Travelers Cos.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

This IP belongs to Deutsche Telekom AG.

This IP belongs to Ford Motor.

This IP was responsible for circulating malicious images masked with spyware.

This IP belongs to Oracle.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

POST /upload.php: An attempt to upload a possibly malicious file.

This IP belongs to Zayo Bandwidth.

This IP belongs to Wells Fargo.

GET /phpMyAdmin: This could be a threat actor looking for an unsecured phpMyAdmin page.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

The IP attempted to use the FTP server as a proxy for other malicious activities.