This IP exhibited malicious sophistication by employing multi-vector attacks.

It attempted to use the FTP server to distribute terrorist propaganda.

This IP belongs to Microsoft.

It made multiple requests with the same X-Att-Deviceid header.

The IP attempted to send spam emails from the Mail server.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

This IP belongs to Best Buy.

HEAD /: May be part of a larger Reconnaissance.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

Our network security detected the IP spreading malicious macros through document files.

It actively attempted to employ session-splicing techniques, interacting with multiple SSH sessions simultaneously to smudge its attack trace.

This IP belongs to GoDaddy.

The IP attempted to perform Integer Overflow attacks on the Apache server.

This IP belongs to Bank of America.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

This IP belongs to Intel.

It appears that this IP was initiating DNSChanger malware attacks on our network.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

Multiple attempts to access the server using encrypted tunnels or proxies.

It engaged in a click fraud operation using our server’s communication channels.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.