The IP attempted to perform a Fraggle attack on the SSH server.

It showed unusual activity in the server's error logs.

This IP belongs to Vodafone.

This IP directed malicious network traffic to our servers with the intent to crash them.

This IP belongs to Alibaba Cloud Services.

The IP attempted to send emails with misleading headers from the Postfix server.

This IP executed mass-probing of various ports to seek vulnerabilities.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

This IP belongs to China Mobile.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The IP attempted to perform a credential stuffing attack on the IMAP server.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

It attempted to perform a brute force attack on the IMAP server.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

Repeated attempts to exploit known vulnerabilities in server software.

This IP belongs to America Movil.

This IP was involved in deploying stealthy credential stealers in our network.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It attempted to perform a replay attack on the SASL server.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.