The IP attempted to use the FTP server to distribute data recovery tools.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

This IP belongs to Shaw Communications.

This IP belongs to Telstra.

It attempted to perform Buffer Overflow attacks on the Apache server.

Attempts to access the server using unusual HTTP methods or request types.

The IP was caught attempting to execute heap overflow attacks.

This IP belongs to Costco Wholesale.

This IP belongs to Xbox Live.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

The IP address attempted to login to the SSH server with an invalid username.

It attempted to delete emails from the POP3 server without authorization.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

This IP belongs to Morgan Stanley.

GET /../htpasswd: Trying to access password files using directory traversal.

The IP attempted to use the Mail server to relay spam to other servers.

It appears that this IP was initiating DNSChanger malware attacks on our network.

It initiated multiple account lockouts in a short period.

GET /../htpasswd: Trying to access password files using directory traversal.

High network traffic at unusual times, suggesting an automated process is running.