Multiple failed login attempts from the same IP address in a short span of time.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

Unusually high number of requests to the login page.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

It attempted to delete emails from the POP3 server without authorization.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

The IP address attempted to exploit known vulnerabilities in server software.

The IP address generated an unusual increase in network bandwidth usage.

The malicious IP tried to brute force its way into the SASL authentication process.

Multiple failed login attempts from the same IP address in a short span of time.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

This IP belongs to Baidu.

It attempted to send emails with malicious links from the Mail server.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP attempted to perform a replay attack on the SSH server.

This IP belongs to UnitedHealth Group.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.