The IP attempted to login to the SASL server with an invalid username.

The IP attempted to send emails from the Mail server without proper authentication.

This IP belongs to OVH.

The IP has initiated several exploits, specifically for software vulnerabilities.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

This IP belongs to Cigna.

Our network security detected the IP spreading malicious macros through document files.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

This IP belongs to General Electric.

This IP belongs to Microsoft.

It attempted to send emails from the Postfix server to a large number of recipients.

The IP address has been linked to the creation of artificial traffic to crash our website.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP attempted to perform a replay attack on the POP3 server.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

This IP belongs to Cloudfare.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

This IP belongs to British Telecommunications.

This IP belongs to Cloudfare.

It attempted to use the VOIP server to perform a reflection DDoS attack.

The IP attempted to use the SASL server to relay phishing emails.