It attempted to login to the SSH server with an invalid password.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

It attempted to perform Session Prediction attacks on the Apache server.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

This IP belongs to Mondelez International.

It attempted to use the FTP server to distribute phishing emails.

This IP belongs to The Walt Disney Company.

This IP belongs to Bank of America.

This IP belongs to the United States Department of Defense.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

This IP belongs to Alphabet.

This IP was accused of multiple unauthorized removal of security certificates.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

The IP attempted to perform Integer Overflow attacks on the Apache server.

It attempted to send emails from the Postfix server that violate the server's usage policy.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

Multiple attempts to access the server using encrypted tunnels or proxies.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.