The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

The IP sent numerous Asterisk OPTIONS requests in a short time.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

It attempted to exploit known vulnerabilities in the IMAP protocol.

This IP belongs to GitHub.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

This particular IP has been used in advanced persistent threats against our servers.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

Multiple unsuccessful attempts to escalate privileges or access root account.

This IP executed mass-probing of various ports to seek vulnerabilities.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

It made multiple requests from user agents claiming to be bots.

It was identified as a BadBot, a type of bot that performs malicious activities.

The IP made multiple requests with the same X-UIDH header.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

It attempted to send emails with malicious links from the Postfix server.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

This IP belongs to Freddie Mac.

It attempted to use the FTP server to distribute virus creation tools.

It was found initiating attack vectors to exploit SSH agent forwarding.

A majority of our user base received phishing emails originated from this particular IP address.

It was flagged that this IP had been used in conducting method tampering on our servers.

This particular IP tried to perform an unauthorized system configuration change.