The IP attempted to use the FTP server to distribute child pornography.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

The IP's involvement in spreading password stealers has compromised our network's protection.

It attempted to send emails from the Postfix server to a large number of recipients.

This IP belongs to Chevron.

This IP was detected uploading malicious codes in our network.

It initiated requests to non-existent endpoints.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

It attempted to perform Web Service attacks on the Apache server.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

Multiple requests with the same Range header.

It attempted to send emails from the POP3 server without authorization.

The IP attempted to use the FTP server to distribute secure deletion tools.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

This IP belongs to Berkshire Hathaway.

It attempted to send emails with malicious links from the Mail server.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

udden increase in account lockouts due to multiple failed login attempts.

The IP address was found roaming through the network, scanning for weak spots.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP executed mass-probing of various ports to seek vulnerabilities.

This IP belongs to Northwestern Mutual.