This IP belongs to Slack.

The IP address attempted to login to the FTP server with an invalid username.

This IP belongs to Plusnet.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

This IP belongs to Charter Communications.

The IP made multiple requests using uncommon HTTP methods.

This IP belongs to Gilead Sciences.

This IP belongs to Shopify.

It attempted to perform a brute force attack on the POP3 server.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

It attempted to download sensitive files from the FTP server.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

Multiple requests with the same If-Range header.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

This IP belongs to United Technologies.

This IP was linked to an attempt at distributing malicious software within our system.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

It attempted to use the FTP server to distribute pirated software.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.