This IP belongs to Steam.

This IP belongs to Deutsche Telekom AG.

It attempted to send emails from the Mail server that violate the server's usage policy.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

udden increase in account lockouts due to multiple failed login attempts.

The IP was detected attempting to skirt our system's detection through spoofing.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

This IP belongs to Sprint.

It attempted to use the FTP server to distribute encryption tools.

Our network security detected the IP spreading malicious macros through document files.

It attempted to perform a dictionary attack on the SASL server.

It attempted to perform a Smurf attack on the SSH server.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

Conducted various IP scans, seeking loopholes in our network's security.

This IP belongs to Archer-Daniels-Midland.

This IP belongs to PepsiCo.

It attempted to perform a man-in-the-middle attack on the IMAP server.

It launched a botnet to infiltrate our Apache-DDoS service.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

The IP attempted to perform Session Replay attacks on the Apache server.

This IP belongs to UnitedHealth Group.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

Unusual patterns in referrer URLs.

Multiple requests with identical Accept-Encoding headers.