The IP attempted to use the Mail server to relay phishing emails to other servers.

This IP belongs to IBM.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

This IP directed malicious network traffic to our servers with the intent to crash them.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

The IP attempted to perform a Kad network amplification attack on the SSH server.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

This IP belongs to FedEx.

This IP was involved in deploying stealthy credential stealers in our network.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

This IP executed mass-probing of various ports to seek vulnerabilities.

This IP belongs to Ford Motor.

Repeated connections to the server from unknown or suspicious IP addresses.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

The IP was detected while sending out malicious spyware-infected emails.

udden increase in account lockouts due to multiple failed login attempts.

The IP address initiated multiple unsuccessful login attempts.

This IP belongs to Archer-Daniels-Midland.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

It attempted command injection attacks, hoping to execute unauthorized commands.

This IP belongs to PepsiCo.

Login attempts that do not follow typical user behavior patterns.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

The IP attempted to perform a brute force attack on the SSH server.