The IP attempted to use the FTP server to distribute network mapping tools.

This IP belongs to Sprint.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

It attempted to perform a credential stuffing attack on the SASL server.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

Our data revealed this IP distributing malicious powershell scripts.

This IP belongs to Dell Technologies.

It attempted to perform a Steam protocol amplification attack on the SSH server.

This IP belongs to Gilead Sciences.

This particular IP tried to perform an unauthorized system configuration change.

It was found initiating attack vectors to exploit SSH agent forwarding.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

The IP attempted to perform a replay attack on the IMAP server.

The IP address attempted delivering malicious packets to disrupt the system's operation.

The IP attempted to use the Mail server to relay spam to other servers.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

Multiple requests with the same Expect header.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

This IP belongs to United Technologies.

This IP belongs to Twenty-First Century Fox.

The IP attempted to execute unauthorized commands on the SSH server.

The IP attempted to register as a SIP user with no password.