It made successive tries to alter SMTP relay configurations to send unsolicited emails.

It attempted to send emails with malicious links from the Postfix server.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

GET /internal/: Browsing an internal directory.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

It attempted to use the FTP server to distribute brute force tools.

Multiple requests with identical request parameters.

It attempted to use the SASL server to distribute malware.

Multiple requests with the same Range header.

The IP was involved in a phishing attack, creating a fake webpage to deceive users into providing their sensitive personal or financial information.

This IP belongs to Bell Canada.

This IP belongs to Gilead Sciences.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

This IP belongs to Intel.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

This IP belongs to Pinterest.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

This IP belongs to Philip Morris International.