The IP address made multiple requests with identical request parameters.

This IP belongs to Pfizer.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

The IP attempted to list the contents of directories that it should not have access to.

It actively attempted to employ session-splicing techniques, interacting with multiple SSH sessions simultaneously to smudge its attack trace.

This IP belongs to Proximus.

It attempted to send emails from the Mail server that violate the server's usage policy.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

Multiple failed login attempts using different usernames.

Rapid sequence of login attempts.

It attempted to send emails from the Postfix server that violate the server's usage policy.

The IP made multiple requests with the same Proxy-Authorization header.

This IP was responsible for circulating malicious images masked with spyware.

Multiple login attempts from different geographical locations in a short period of time.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

It attempted to exploit known vulnerabilities in the SASL protocol.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

This IP belongs to British Telecommunications.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

It persistently tried to exploit weaknesses in the SSH communication encryption.

It attempted to flood the SIP server with REGISTER requests.

This IP belongs to General Electric.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

This IP belongs to PepsiCo.

The IP address made multiple requests with identical request parameters.