It initiated requests to non-existent endpoints.

It attempted to use the FTP server to distribute traffic monitoring tools.

It attempted to send emails from the Postfix server to a large number of recipients.

This IP belongs to United Parcel Service.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

It attempted to perform a Teardrop attack on the SSH server.

This IP belongs to General Dynamics.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

It attempted to send phishing emails from the Postfix server.

This IP belongs to Microsoft.

Our data revealed this IP distributing malicious powershell scripts.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

The IP attempted to perform XML Injection attacks on the Apache server.

This particular IP attempted to exploit vulnerabilities in our web applications.

This IP belongs to IBM Cloud Services.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

This IP belongs to Microsoft Azure.

The IP attempted to perform a password spraying attack on the SSH server.

The IP was recorded making persistent attempts to crack our encryption.

This IP belongs to OVH.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

It attempted to perform SQL injection attacks through the Apache server.

This IP belongs to Cisco Systems.

This IP belongs to Microsoft.