It attempted to login to the SASL server with an invalid password.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

Our team flagged this IP for injecting harmful ActiveX codes.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

GET /errors.log: Shows an actor trying to access server error logs.

The IP was caught distributing VoIP crackers to exploit our communication channels.

This IP belongs to China Mobile.

This IP belongs to Kroger.

It attempted to make unauthorized calls using the VOIP server.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

Multiple failed attempts to use the server’s API.

It attempted to upload malicious files to the SSH server.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

The IP sent numerous SIP OPTIONS requests in a short time.

This IP was accused of multiple unauthorized removal of security certificates.

This IP belongs to Deere.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

It attempted to execute unauthorized commands on the Apache server.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

This IP belongs to BT Central Plus.

The IP attempted to send emails with misleading headers from the Mail server.

This IP belongs to Bank of America.

It was found that the IP had deployed rogue security software in our system.