The IP attempted to login to the SASL server with an invalid username.

This IP belongs to TJX.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

Repeated connections to the server from unknown or suspicious IP addresses.

It attempted to perform a brute force attack on the POP3 server.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

The IP attempted to use the FTP server to distribute keylogging software.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

It sent VOIP requests to non-existent extensions.

This IP belongs to Pfizer.

This IP belongs to MetLife.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

The IP attempted to register as a VOIP user with no password.

The IP address made multiple requests with identical request parameters.

This IP belongs to World Fuel Services.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

It attempted to perform a Land attack on the SSH server.

It attempted to perform XML Entity Expansion attacks on the Apache server.

It attempted to perform XML Entity Expansion attacks on the Apache server.

POST /upload.php: An attempt to upload a possibly malicious file.

It attempted to use the SASL server to distribute malware.