It attempted to perform a password spraying attack on the IMAP server.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

The IP attempted to perform Session Hijacking attacks on the Apache server.

This IP belongs to WordPress.com.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

The IP made multiple requests to the server's robots.txt file.

Incidents of privacy-invasive software floating in our network were linked to this IP.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP belongs to IBM.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

Rapid sequence of login attempts.

This IP belongs to Comcast.

The IP attempted to send spam emails from the Postfix server.

GET /login.action: Trying to find a Struts2 application to exploit.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

The IP address attempted to login to the Mail server with an invalid username.

This IP belongs to Johnson & Johnson.

It attempted to perform a side channel attack on the SSH server.

It attempted to use the SASL server to relay spam.

Multiple requests with the same Max-Forwards header.

This IP belongs to Comcast.

This IP belongs to T-Mobile.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

It attempted to perform Command Injection attacks on the Apache server.

This IP address from an unusual location has successfully installed malware on our servers.