This IP belongs to Tyson Foods.

The IP attempted to perform a Fraggle attack on the SSH server.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

Multiple requests with the same If-None-Match header.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

This IP belongs to Cigna.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

This IP belongs to Walgreens Boots Alliance.

Participated in malicious pranks by altering messages sent through the server.

It partook in location spoofing, making it appear from different locations.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

It made multiple requests with the same X-Att-Deviceid header.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

The IP address made multiple requests with identical request parameters.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

The IP tried to carry out illegal 'HTTP Request Smuggling' to fool the Apache server.

Our data revealed this IP distributing malicious powershell scripts.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.