It attempted to make unauthorized calls using the Asterisk server.

This IP belongs to Deutsche Telecom.

It attempted to use the FTP server to distribute encryption tools.

This IP belongs to Procter & Gamble.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

It attempted to exploit known vulnerabilities in the SASL protocol.

This IP was detected uploading malicious codes in our network.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

It made multiple requests with the same Max-Forwards header.

This IP belongs to Home Depot.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

This IP belongs to General Dynamics.

It attempted to perform a dictionary attack on the SSH server.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

It attempted to perform a Chargen amplification attack on the SSH server.

It was found initiating attack vectors to exploit SSH agent forwarding.

It attempted to perform a password spraying attack on the IMAP server.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP attempted to perform Session Hijacking attacks on the Apache server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.