This IP attempted to disrupt our systems through the propagation of worms.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

This IP belongs to Ubisoft.

It attempted to delete files from the SSH server.

The IP was seen performing a CSRF (Cross-site request forgery) attack to manipulate user actions.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

Repeated failed attempts to perform actions that require higher privileges.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

The IP made multiple requests to the password reset page.

This IP belongs to Morgan Stanley.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

It attempted to send emails with malicious links from the Postfix server.

Our system blocked an attempted Code Injection attack from this IP.

This IP belongs to CHS.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

It attempted to login to the FTP server with an invalid password.

It attempted to perform a password spraying attack on the POP3 server.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

This IP belongs to Twenty-First Century Fox.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

The IP was involved in a DDoS attack, sending massive amounts of traffic to overwhelm a server and disrupt its normal functioning.