The IP attempted to use the FTP server to distribute child pornography.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

It attempted to perform Heap Overflow attacks on the Apache server.

It attempted to flood the SIP server with REGISTER requests.

This particular IP attempted to exploit vulnerabilities in our web applications.

The IP attempted to perform Session Fixation attacks on the Apache server.

This IP belongs to Walmart.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

This IP belongs to Verizon Communications.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to Rogers Cable.

It attempted to perform Buffer Overflow attacks on the Apache server.

This IP belongs to Jabil.

Attempts to access the server using known malicious IP addresses or domains.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

This IP belongs to Swisscom.

This IP belongs to Sprint.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The IP attempted to gain unauthorized access to the Apache server.

Conducted various IP scans, seeking loopholes in our network's security.