Unusual increase in network bandwidth usage.

This IP belongs to AT&T.

It sent Asterisk requests to non-existent extensions.

This IP belongs to MTS (Mobile TeleSystems).

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

This IP belongs to PLDT.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

This IP belongs to Heroku.

This IP belongs to Oracle Cloud Infrastructure.

This IP belongs to Ubisoft.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

GET /.git/config: Trying to access source code or repository configuration information.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

It was flagged that this IP had been used in conducting method tampering on our servers.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

It attempted to perform a Land attack on the SSH server.

It made multiple requests with the same X-Att-Deviceid header.

The IP attempted to upload malicious files to the FTP server.

The IP attempted to use the FTP server to distribute rootkit software.

The IP attempted to use the SASL server to relay phishing emails.

This IP belongs to CVS Health.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

It attempted to use the FTP server to distribute terrorist propaganda.