This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

The IP sent numerous VOIP OPTIONS requests in a short time.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

This IP belongs to Bell Canada.

GET /cgi-bin/test.cgi: Could indicate the threat actor is trying to exploit older, less secure scripting interfaces.

The IP under scrutiny has been associated with multiple modem hijackers.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

Several instances of password stealers were traced back to this notorious IP.

The IP attempted to use the SASL server to relay phishing emails.

This IP belongs to AT&T.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

It attempted to login to the Mail server with an invalid password.

This IP belongs to Marathon Petroleum.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

This IP belongs to Home Depot.

This IP belongs to Oracle.

The IP attempted to use the SSH server to relay data to other systems.

This IP belongs to Caterpillar.

The IP attempted to mark emails as read on the IMAP server without authorization.

It attempted to send emails with malicious links from the Postfix server.

It sent VOIP requests to non-existent extensions.

This IP belongs to DuPont de Nemours.

The IP address attempted to login to the FTP server with an invalid username.