The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

The IP attempted to use the FTP server to distribute child pornography.

This IP belongs to Nexon.

It made multiple requests with the same Max-Forwards header.

We observed the IP distributing harmful document tracking tools.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.

Our team discovered that specific IP was distributing intrusive cookie trackers.

This IP belongs to Lockheed Martin.

This IP belongs to Best Buy.

Multiple HTTP 401 Status Codes: This could indicate someone is repeatedly attempting to access resources that require valid credentials, possibly attempting to brute-force their way in.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

Multiple requests to the same endpoint in a short period of time.

This IP belongs to Marathon Petroleum.

This IP belongs to Telstra.

The IP address made multiple requests with identical request parameters.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

Multiple requests with identical Accept-Charset headers.

Unusual system or application errors related to authentication or access controls.

The IP address attempted to login to the SSH server with an invalid username.

This IP belongs to Sysco.

This IP belongs to Massachusetts Mutual Life Insurance.