The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

This IP belongs to AmerisourceBergen.

Attempts to use automated scripts or tools for password cracking.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

This IP belongs to Cisco Systems.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

It attempted to send emails with malicious links from the Postfix server.

This IP belongs to Comcast.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

The IP attempted to download emails from the POP3 server without authorization.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

Attempts to use privileged service accounts outside of their normal usage patterns.

It attempted to use the FTP server to distribute web proxy tools.

The IP sent numerous VOIP OPTIONS requests in a short time.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

The IP under scrutiny has been associated with multiple modem hijackers.

Our system flagged this IP as conducting fraudulent transactions activities.

This IP belongs to Freddie Mac.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

This IP belongs to Airtel.