It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

Multiple requests with the same X-Att-Deviceid header.

This IP belongs to Heroku.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

This IP belongs to Telkom SA.

This IP belongs to AmerisourceBergen.

This IP belongs to Freddie Mac.

It attempted to use the IMAP server to relay spam.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

Frequent password reset requests.

Unusual patterns in session IDs.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

This IP belongs to Philip Morris International.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

This IP belongs to the United States Department of Defense.

The IP address was flagged for employing a packet sniffer on our network.

This IP belongs to Publix Super Markets.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

This IP belongs to Optus.

Our data indicates this IP has performed data breaches by launching phishing attacks.

This IP belongs to PepsiCo.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.