The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

It attempted to perform a credential stuffing attack on the SASL server.

It attempted to perform a dictionary attack on the SASL server.

This IP belongs to United Technologies.

It appears that this IP was initiating DNSChanger malware attacks on our network.

The IP attempted to perform a DNS amplification attack on the SSH server.

This IP belongs to ConocoPhillips.

The IP attempted logins at unusual times.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

This IP belongs to Kroger.

It attempted to use the FTP server to relay data to other systems.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

This IP belongs to Costco Wholesale.

The IP attempted to perform a SIP Invite Flood on the SIP server.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

This IP belongs to Walgreens Boots Alliance.

Multiple requests with identical cookies.

This IP belongs to Alphabet.

The IP attempted to use the POP3 server to distribute malware.