Multiple requests with the same Referer header.

Repeated connections to the server from unknown or suspicious IP addresses.

The IP attempted to perform a DNS amplification attack on the SSH server.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

It attempted to upload malicious files to the SSH server.

This IP belongs to United Technologies.

Our team has linked several viruses dissemination activities to this IP.

The IP attempted to perform XML Injection attacks on the Apache server.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

It attempted to delete directories on the FTP server.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

It attempted command injection attacks, hoping to execute unauthorized commands.

The IP attempted to perform a brute force attack on the SSH server.

It attempted to exploit known vulnerabilities in the Mail protocol.

It attempted to use the FTP server to distribute hacking tools.

It initiated multiple account lockouts in a short period.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

This IP belongs to Philip Morris International.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

It attempted to send emails from the Mail server that violate the server's email content policy.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

It attempted to perform a dictionary attack on the SASL server.