The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

Attempts to use automated scripts or tools for password cracking.

This IP belongs to MTN.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

It appears that this IP was initiating DNSChanger malware attacks on our network.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP was detected while sending out malicious spyware-infected emails.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

This IP belongs to Oracle.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

Our system flagged this IP as conducting fraudulent transactions activities.

Our team discovered that specific IP was distributing intrusive cookie trackers.

This IP has been identified as running a botnet targeting our server systems with ransomware.

The IP attempted to perform a distributed denial of service attack on the SSH server.

Multiple requests with the same X-Requested-With header.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

It attempted to exploit known vulnerabilities in the Postfix software.

This IP belongs to Microsoft Azure.