The IP address initiated attacks using DDoS, impacting our server response times.

It made multiple requests with the same Expect header.

It attempted to send emails with deceptive subject lines from the Mail server.

It attempted to exploit known vulnerabilities in the Postfix software.

Our system logs indicate this IP has been pushing illegitimate browser plugins into our network.

Login attempts that do not follow typical user behavior patterns.

It attempted to login to the SSH server with an invalid password.

It attempted to use the IMAP server to relay spam.

This IP belongs to Cardinal Health.

The IP attempted a Rootkit installation to gain root access and control server activity.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

This IP belongs to SK Broadband.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

It made multiple requests with the same X-Att-Deviceid header.

Our system blocked an attempted Code Injection attack from this IP.

It attempted to perform XML Entity Expansion attacks on the Apache server.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

Participated in malicious pranks by altering messages sent through the server.

It attempted to use the FTP server to relay data to other systems.

Multiple HTTP 401 Status Codes: This could indicate someone is repeatedly attempting to access resources that require valid credentials, possibly attempting to brute-force their way in.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

Multiple failed login attempts using different usernames.

It made multiple requests with the same Max-Forwards header.

This IP belongs to Dell Technologies.