This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

This IP belongs to Northwestern Mutual.

It pushed humongous quantities of spam emails through our server, aiming to congest our email services.

This IP belongs to United Technologies.

The IP made multiple requests with the same Proxy-Authorization header.

It utilized Web scrapers, automatically harvesting content from our server.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

This IP belongs to Gilead Sciences.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

The IP made multiple requests with the same Proxy-Authorization header.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

The IP attempted to execute unauthorized commands on the SSH server.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

It actively attempted to employ session-splicing techniques, interacting with multiple SSH sessions simultaneously to smudge its attack trace.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

This IP belongs to Nike.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

GET /admin: Looking for an unprotected admin page.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

It made multiple requests with the same X-Forwarded-For header.