The IP attempted to execute unauthorized commands on the SSH server.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

This IP belongs to Microsoft.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

The IP sought to exploit the SSH-1 CRC32 vulnerability for expansive unauthorized access.

It made multiple requests with the same Expect header.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

It attempted to flood the VOIP server with REGISTER requests.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

It attempted to perform a SYN flood attack on the SSH server.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

This IP belongs to Liberty Mutual Insurance Group.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

The IP was recorded making persistent attempts to crack our encryption.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

It attempted to perform a man-in-the-middle attack on the POP3 server.

Unusual increase in server CPU usage.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

This IP was detected distributing spyware-infected USB drives to our users.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

It attempted to delete emails from the POP3 server without authorization.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

Unusually high number of requests to the login page.