This IP belongs to IBM.

The IP attempted to use the FTP server to distribute steganography tools.

Our firewall recorded intrusion attempts originating from this suspicious IP.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

The IP attempted to send emails with misleading headers from the Mail server.

This IP belongs to Walmart.

This IP belongs to WordPress.com.

The IP attempted to perform Symlink attacks on the Apache server.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

Unusual patterns in the Accept-Language header.

This IP belongs to Oracle.

udden increase in account lockouts due to multiple failed login attempts.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

It attempted to exploit known vulnerabilities in the IMAP protocol.

Unusual system or application errors related to authentication or access controls.

The IP made multiple requests with the same TE header.

This IP belongs to Virgin Media.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.