Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP attempted to use the FTP server to distribute credit card fraud tools.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

This IP belongs to Softbank.

This IP belongs to Gilead Sciences.

The IP made multiple requests with the same Warning header.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

This IP belongs to Softbank.

Our system flagged this IP as conducting fraudulent transactions activities.

It attempted to perform a Teardrop attack on the SSH server.

It attempted to use the FTP server to distribute traffic monitoring tools.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

The IP attempted to send spam emails from the Mail server.

Repeated attempts to access rarely used or hidden services on the server.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

It attempted to use the FTP server to distribute network scanning tools.

The IP attempted to register as a SIP user with no password.

It attempted to use the FTP server to distribute traffic monitoring tools.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

This IP was distributing rogue security software, misleading users to think their systems are infected.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.