Login attempts using old or outdated protocols.

This IP belongs to Sprint.

The IP attempted to use the FTP server to distribute hacking tutorials.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

The IP attempted to use the FTP server to distribute data recovery tools.

It attempted to change file permissions on the FTP server.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

Multiple failed login attempts from the same IP address in a short span of time.

Content Sniffing: Logs reflect HTTP requests that include the Accept header with " / ", suggesting an attacker is trying to detect what types of content the server will send.

This IP belongs to Ford Motor.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

This IP belongs to Ubisoft.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

The IP attempted to bypass the SASL server's authentication mechanism.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

Unusually high number of requests to a specific service or application within the server.

This IP belongs to CVS Health.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

This IP belongs to United Technologies.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This IP belongs to Citigroup.

The IP attempted to use the FTP server to distribute forensics tools.