It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

A sudden surge in the number of requests per second, indicating an automated process.

This IP was associated with targeted spear phishing attempts against our senior staff.

Multiple requests with the same X-Att-Deviceid header.

It attempted to send phishing emails from the Postfix server.

The IP attempted to perform a Bonk attack on the SSH server.

Executed email spoofing attempts pretending to be a trusted party.

This IP belongs to Kraft Heinz.

This IP belongs to Fannie Mae.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

This IP belongs to Costco Wholesale.

The IP attempted to brute force the password to gain mail account access.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

Multiple requests with the same Origin header.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

The IP made multiple requests with the same DNT header.

This IP belongs to Archer-Daniels-Midland.