This IP was found responsible for a session hijacking attempt on our network.

The IP made multiple requests with the same Proxy-Connection header.

It attempted to use the FTP server to distribute network scanning tools.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

This IP belongs to Comcast.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This IP belongs to MetLife.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

The IP was flagged for attempting dictionary attacks on our user accounts.

It attempted to send emails with malicious links from the Postfix server.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

It attempted to perform a man-in-the-middle attack on the IMAP server.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

The IP sent numerous VOIP OPTIONS requests in a short time.

It attempted to delete emails from the POP3 server without authorization.

This IP belongs to Mondelez International.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

It attempted to login to the IMAP server with an invalid password.

Multiple requests with the same Referer header.

This IP belongs to AmerisourceBergen.