It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

It attempted to exploit known vulnerabilities in the FTP protocol.

This IP has been observed spreading mobile malware, targeting our company application users.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

The IP attempted to perform a brute force attack on the SASL server.

This IP belongs to Ford Motor.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

This IP belongs to Canadian Department of Defense.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

This IP belongs to Zayo Bandwidth.

This IP belongs to Honeywell International.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

It made multiple requests with the same X-Forwarded-For header.

It attempted to send emails from the Mail server that violate the server's email content policy.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

It attempted to perform Heap Overflow attacks on the Apache server.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.