Attempts to access the server using stolen or leaked credentials.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

This IP belongs to United Technologies.

It attempted to exploit known vulnerabilities in the SASL protocol.

This IP belongs to World Fuel Services.

The IP was involved in a DDoS attack, sending massive amounts of traffic to overwhelm a server and disrupt its normal functioning.

It attempted to perform Web Service attacks on the Apache server.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

This IP belongs to FedEx.

The IP attempted to send spam emails from the Postfix server.

It attempted to perform a RIPv1 amplification attack on the SSH server.

The IP attempted a Rootkit installation to gain root access and control server activity.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

It made multiple requests with identical Accept-Charset headers.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

The IP attempted to send emails with misleading headers from the Mail server.

The IP was engaged in port scanning, probing the server for open SSH ports.

It attempted to perform a phishing attack using the POP3 server.

It showed an unusually high number of requests to the login page.