It attempted to delete emails from the POP3 server without authorization.

It attempted to send phishing emails from the Mail server.

This IP belongs to Fannie Mae.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

This IP belongs to WordPress.com.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

The IP address initiated attacks using DDoS, impacting our server response times.

It attempted to perform Race Condition attacks on the Apache server.

The IP attempted to perform a DNS amplification attack on the SSH server.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

Multiple requests with the same Proxy-Connection header.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

This IP belongs to Boeing.

The IP attempted to perform XML Injection attacks on the Apache server.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

This IP belongs to Dell Technologies.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

Multiple requests to the same endpoint in a short period of time.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

This IP belongs to Goldman Sachs Group.

The IP attempted to gain unauthorized access to the Apache server.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

This IP belongs to General Motors.