It made multiple requests with the same Max-Forwards header.

It attempted to login to the Mail server with an invalid password.

It showed an unusually high number of requests to the login page.

The IP made multiple requests with the same Warning header.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

The IP made multiple requests with the same TE header.

This IP belongs to American Express.

The IP attempted to perform a replay attack on the IMAP server.

It attempted to send phishing emails from the Mail server.

This IP belongs to Comcast.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

This IP belongs to Telus Communications.

This IP belongs to IBM.

This IP belongs to Gilead Sciences.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

The IP attempted to use the FTP server to distribute child pornography.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

It attempted to use the FTP server to distribute web proxy tools.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

It attempted to use the VOIP server to perform a reflection DDoS attack.

It attempted to send emails with malicious links from the Mail server.

This IP belongs to Exxon Mobil.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

This IP belongs to NetEase.