The IP launched timing attacks, trying to understand our server timings for potential future exploits.

It repetitively attempted Port Scanning to identify open ports and related vulnerabilities.

It attempted to send emails with malicious links from the Mail server.

This IP belongs to Cigna.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

This IP belongs to PepsiCo.

Unusual increase in network bandwidth usage.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

This IP belongs to Anthem.

The IP attempted to perform a dictionary attack on the POP3 server.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

It attempted to perform a Land attack on the SSH server.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

It made multiple requests with the same X-Att-Deviceid header.

The IP attempted to change file permissions on the SSH server.

The IP address has been linked to the creation of artificial traffic to crash our website.

POST /upload.php: An attempt to upload a possibly malicious file.

The IP attempted to perform a credential stuffing attack on the POP3 server.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.