Multiple requests with the same DNT (Do Not Track) header.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

This IP belongs to MetLife.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

This IP belongs to DigitalOcean.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

Our team flagged this IP for injecting harmful ActiveX codes.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

The IP was involved in a rapid sequence of login attempts.

The IP attempted to perform a phishing attack using the SASL server.

The malicious IP tried to brute force its way into the SASL authentication process.

It attempted to use the VOIP server to perform a reflection DDoS attack.

This particular IP tried to perform an unauthorized system configuration change.

This IP belongs to Archer-Daniels-Midland.

It persistently tried to exploit weaknesses in the SSH communication encryption.

It attempted to use the FTP server to distribute brute force tools.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

This IP belongs to OVH.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

The IP was detected attempting to skirt our system's detection through spoofing.

The IP attempted to use the FTP server to distribute DDoS attack tools.