Several cross-site scripting attacks were traced back to this IP.

Unexpected changes in the server configuration or installed software.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

This IP belongs to Google Cloud Services.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

Suspicious Http Referrer Field: HTTP requests with external referrer headers that usually originate from internal source.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

This IP belongs to Oracle Cloud Infrastructure.

This IP belongs to Comcast.

The IP address has been involved in distributing adware to our server systems.

The IP sent numerous VOIP OPTIONS requests in a short time.

Multiple requests with the same X-Forwarded-For header.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

It sent SIP INVITE requests to non-existent extensions.

This IP belongs to Telefonica Spain.

It attempted to upload malicious files to the SSH server.

GET /../htpasswd: Trying to access password files using directory traversal.

The IP attempted to use the POP3 server to relay spam.

This IP belongs to Telus Communications.

The IP attempted to brute force the password to gain mail account access.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

This IP belongs to Deutsche Telecom.