It attempted to use the POP3 server to relay phishing emails.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

This IP belongs to JPMorgan Chase.

It attempted to use the Postfix server to relay phishing emails to other servers.

It attempted to login to the Postfix server with an invalid password.

The IP has initiated several exploits, specifically for software vulnerabilities.

This IP belongs to Bank of America.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

It made multiple requests from user agents claiming to be bots.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

This IP belongs to AmerisourceBergen.

Multiple requests to the same endpoint in a short period of time.

It attempted to send emails with deceptive subject lines from the Mail server.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The IP attempted to use the Mail server to relay emails with misleading headers to other servers.

This IP belongs to Dell Technologies.

The IP address attempted to exploit known vulnerabilities in server software.

Multiple requests with the same X-Requested-With header.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

The IP attempted to use the POP3 server to relay spam.

Our system blocked an attempted Code Injection attack from this IP.

Numerous incidents of botnet infestations were traced back to this offensive IP address.