The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

This IP belongs to Honeywell International.

Our team flagged this IP for injecting harmful ActiveX codes.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

It showed unusual patterns in the sequence of requests.

This IP belongs to Telkom SA.

This IP was detected initiating zero-day exploit attacks on our system.

This IP exhibited malicious sophistication by employing multi-vector attacks.

It made multiple requests with the same X-Csrf-Token header.

This IP belongs to Goldman Sachs Group.

A series of active scareware campaigns was traced back to this IP address.

This IP belongs to Massachusetts Mutual Life Insurance.

It attempted to make unauthorized calls using the VOIP server.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

It attempted to exploit known vulnerabilities in the SASL protocol.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

It was found that the IP had deployed rogue security software in our system.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

GET /admin: Looking for an unprotected admin page.

It attempted to use the FTP server to distribute phishing emails.

This IP addressed employed a method of brute force attack attempting to compromise our systems.