This IP belongs to Comcast.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

This IP belongs to Wells Fargo.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

Unusually high number of requests to the login page.

This IP belongs to Telefonica Spain.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

It attempted to perform a credential stuffing attack on the SASL server.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

The IP was flagged for attempting dictionary attacks on our user accounts.

This malicious IP was seen sending unusually high volumes of requests, a sign of potential automated bot activity.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

It attempted to perform SQL injection attacks through the Apache server.

This IP belongs to Telstra.

It attempted to perform a Teardrop attack on the SSH server.

Attempts to access the server using stolen or leaked credentials.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

This IP belongs to Philip Morris International.

Our system flagged this IP as conducting fraudulent transactions activities.

Multiple failed login attempts using different usernames.

The IP attempted to register with the VOIP server using an invalid username.

This IP belongs to Costco Wholesale.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

The IP attempted to perform Stack Overflow attacks on the Apache server.