A dangerous data surveillance spyware was tied back to this IP.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

This IP belongs to Time Warner Cable Internet.

It attempted to use the FTP server to distribute terrorist propaganda.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

The IP attempted to login to the SASL server with an invalid username.

Multiple attempts to access the server using anonymous or generic user accounts.

It attempted to perform a replay attack on the SASL server.

It attempted to perform Session Sidejacking attacks on the Apache server.

This IP belongs to Cardinal Health.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

udden increase in account lockouts due to multiple failed login attempts.

This IP belongs to Publix Super Markets.

A sudden surge in the number of requests per second, indicating an automated process.

Conducted various IP scans, seeking loopholes in our network's security.

This IP belongs to Ubisoft.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

It attempted to perform a Steam protocol amplification attack on the SSH server.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.