It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

It made multiple requests with the same If-None-Match header.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

It attempted to delete files from the SSH server.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

GET /phpMyAdmin: This could be a threat actor looking for an unsecured phpMyAdmin page.

High network traffic at unusual times, suggesting an automated process is running.

The IP was detected attempting to skirt our system's detection through spoofing.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This IP belongs to Freddie Mac.

It was discovered illicitly scanning the server for potential vulnerabilities.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

It attempted to make unauthorized calls using the VOIP server.

The IP attempted to use the FTP server to distribute DDoS attack tools.

It attempted to perform a dictionary attack on the SASL server.

This IP belongs to United Technologies.

The IP attempted to use the SASL server to relay phishing emails.

This IP belongs to PepsiCo.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

This IP belongs to Dreamhost.

This IP was caught conducting cookie-poisoning attack.

It attempted multiple LDAP injection attacks to gain unauthorized access.