The IP attempted to perform a timing attack on the SSH server.

This IP belongs to Marathon Petroleum.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

It attempted to use the FTP server to relay data to other systems.

The IP made multiple requests with the same Origin header.

It attempted to exploit known vulnerabilities in the POP3 protocol.

It attempted to perform a credential stuffing attack on the SASL server.

Executed email spoofing attempts pretending to be a trusted party.

It attempted to make unauthorized calls using the VOIP server.

It persistently tried to exploit weaknesses in the SSH communication encryption.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

It appears that this IP was initiating DNSChanger malware attacks on our network.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

It attempted to send emails from the Mail server that violate the server's usage policy.

The IP tried creating false server responses hoping to disrupt the SASL service.

Attempts to use automated scripts or tools for password cracking.

This IP belongs to Amazon Web Services.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

This IP belongs to McKesson.

This IP belongs to Philip Morris International.