This IP belongs to Telus Communications.

The IP attempted to perform a dictionary attack on the POP3 server.

The IP attempted to send emails from the IMAP server without authorization.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

This IP belongs to General Dynamics.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

This IP belongs to Goldman Sachs Group.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

The IP made multiple requests to the server's robots.txt file.

It attempted to perform a Steam protocol amplification attack on the SSH server.

The IP attempted to use the POP3 server to relay spam.

This IP attempted to disrupt our systems through the propagation of worms.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

Multiple requests with the same DNT (Do Not Track) header.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

This IP belongs to the United States Department of Defense.

Fileless malware dissemination has been observed from this IP address.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP attempted to delete files from the FTP server.