An identity theft activity was linked back to this malicious IP.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

This IP belongs to Northwestern Mutual.

The IP attempted to upload malicious files to the FTP server.

The IP attempted to use the Mail server to relay phishing emails to other servers.

It attempted to send emails from the Mail server to a large number of recipients.

This IP belongs to The Walt Disney Company.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

It attempted to login to the IMAP server with an invalid password.

The IP had been flagged for initiating SYN flood attacks on our servers.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

The IP attempted to perform a DNS amplification attack on the SSH server.

Unidentified password attempts and login activity were noticed from the specific IP address.

The IP made multiple requests with the same X-UIDH header.

GET /backup.sql: Attempting to access a backup of your database.

This IP belongs to MetLife.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

This IP belongs to Facebook.

This IP belongs to MetLife.

The IP attempted to send spam emails from the Postfix server.

This IP belongs to Nike.