This IP belongs to Intel.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP belongs to Fannie Mae.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

It attempted to download sensitive files from the FTP server.

It attempted to send emails from the Mail server that violate the server's usage policy.

This IP belongs to NetEase.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

This IP belongs to Oracle Cloud Infrastructure.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

It attempted to perform a dictionary attack on the SASL server.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

The IP made multiple requests with the same DNT header.

It attempted to exploit known vulnerabilities in the SSH protocol.

This IP belongs to Deere.

It sent SIP INVITE requests to non-existent extensions.

A series of active scareware campaigns was traced back to this IP address.

This IP belongs to Korea Telecom.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.