It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

It attempted to login to the SASL server with an invalid password.

Unusual increase in server CPU usage.

The IP attempted to send emails with misleading headers from the Mail server.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

POST /upload.php: An attempt to upload a possibly malicious file.

This IP belongs to IBM Cloud Services.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

It attempted to use the FTP server to distribute botnet command and control software.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

This IP belongs to Medium.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

This IP belongs to Alphabet.

The IP attempted to use the Mail server to relay spam to other servers.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

This IP belongs to Citigroup.

This IP belongs to Verizon Communications.

It attempted to create new directories on the SSH server.

Multiple requests with the same Origin header.

This IP belongs to Cigna.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

This IP belongs to Nike.