The IP attempted to perform a replay attack on the POP3 server.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

This IP belongs to Liberty Mutual Insurance Group.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

This IP belongs to Microsoft.

The IP attempted to perform a credential stuffing attack on the POP3 server.

This IP belongs to Phillips 66.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The IP was found trying to maliciously clone the SSH certificates for privileged access.

This IP belongs to Prudential Financial.

This IP belongs to 3M.

It made multiple requests with the same X-Requested-With header.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

It attempted to send emails from the POP3 server without authorization.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

It tried to execute dictionary attacks on our Mail service causing potential delays.