The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

It attempted to perform a SIPVicious scan on the SIP server.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

This IP belongs to Wells Fargo.

The IP attempted to perform a brute force attack on the SASL server.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

Multiple requests with the same If-Match header.

The IP attempted to login to the Postfix server with an invalid username.

The IP attempted to perform a replay attack on the SSH server.

GET /setup.php: Effort to locate setup files for PHP applications.

The IP was found to be behind numerous fileless malware attacks.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

This IP belongs to Plusnet.

The IP attempted to perform a dictionary attack on the POP3 server.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

This IP belongs to Citigroup.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to Procter & Gamble.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.