Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

The IP attempted to use the FTP server to distribute child pornography.

It engaged in a click fraud operation using our server’s communication channels.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

This IP belongs to United Technologies.

The IP attempted to use the FTP server to distribute VPN tools.

This IP belongs to Ziggo.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

Repeated attempts to alter or delete log files to cover tracks.

This IP belongs to Marathon Petroleum.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

The IP attempted a race condition attack, aiming to execute unwanted sequences in the server.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

It attempted to use the FTP server to relay data to other systems.

It attempted to send phishing emails from the Mail server.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

The IP attempted to mark emails as read on the IMAP server without authorization.

It attempted to perform a Smurf attack on the SSH server.

It attempted to use the FTP server to distribute hacking tools.