It attempted to exploit known vulnerabilities in the IMAP protocol.

This IP belongs to General Electric.

The IP attempted to use the FTP server to distribute steganography tools.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

It attempted to use the Postfix server to relay spam to other servers.

This IP belongs to United Technologies.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

Multiple attempts to access the server using different ports or protocols.

Repeated attempts to exploit known vulnerabilities in server software.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

This IP belongs to CVS Health.

It attempted to use the FTP server to relay data to other systems.

It attempted to send phishing emails from the Mail server.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

It attempted to use the FTP server to distribute botnet command and control software.

It actively sought to exploit unpatched software within our server applications.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

Our system blocked an attempted Code Injection attack from this IP.

This IP has been detected spreading notorious credit card skimmers.

The IP sent numerous SIP OPTIONS requests in a short time.

Our network security detected the IP spreading malicious macros through document files.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.