This IP belongs to Shaw Communications.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.

It attempted to login to the POP3 server with an invalid password.

The IP tried to crack S/MIME encryption for accessing secured email contents.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

Multiple requests with the same X-UIDH header.

The IP made multiple requests with the same Warning header.

This IP attempted to disrupt our systems through the propagation of worms.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

It attempted to use the SIP server to perform a reflection DDoS attack.

It attempted to flood the SIP server with REGISTER requests.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

This IP belongs to Goldman Sachs Group.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

It made multiple requests with identical Accept-Charset headers.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

It attempted to perform Race Condition attacks on the Apache server.

GET /server-status: Often an attempt to check Apache server status.

The IP was flagged for attempting dictionary attacks on our user accounts.

The IP attempted to perform a Fraggle attack on the SSH server.

It attempted to flood the SIP server with REGISTER requests.

It attempted to use the VOIP server to perform a reflection DDoS attack.

GET /db/finance.dump: An attempt to access a database dump file.