The IP engaged in a mail relay attack, using our server to send spam.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

Our data indicates this IP has performed data breaches by launching phishing attacks.

The IP attempted to perform a credential stuffing attack on the IMAP server.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

The IP address initiated multiple unsuccessful login attempts.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

The IP sought to exploit the SSH-1 CRC32 vulnerability for expansive unauthorized access.

The IP attempted to register with the Asterisk server using an invalid username.

The IP made multiple requests with the same Origin header.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

This IP belongs to Lowe's.

The IP attempted to use the FTP server to distribute DDoS attack tools.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

udden increase in account lockouts due to multiple failed login attempts.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

It attempted to use the FTP server to distribute brute force tools.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

This IP belongs to Orange France Telecom.

This IP has been flagged for attempting to escalate privileges in our network.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.