The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The IP attempted to download emails from the POP3 server without authorization.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

This IP belongs to United Continental Holdings.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

The IP made multiple unsuccessful login attempts in a short period of time.

It attempted to use the FTP server to distribute traffic monitoring tools.

The IP attempted to use the FTP server to distribute hacking tutorials.

This IP belongs to IBM Cloud Services.

The IP address attempted to login to the FTP server with an invalid username.

This IP belongs to American Express.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

Multiple attempts to access the server using encrypted tunnels or proxies.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

This IP belongs to OVH.

This IP belongs to Amazon Web Services.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

Multiple requests with the same TE (Transfer Encoding) header.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

The IP address initiated attacks using DDoS, impacting our server response times.

This IP belongs to McKesson.