It made multiple requests with the same Max-Forwards header.

It attempted to use the FTP server to distribute hacking tools.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

Multiple requests with the same X-Wap-Profile header.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

This IP belongs to Freddie Mac.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

The IP attempted to perform a SNMP amplification attack on the SSH server.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It attempted command injection attacks, hoping to execute unauthorized commands.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

This IP belongs to Cardinal Health.

The IP address has been involved in distributing adware to our server systems.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

An identity theft activity was linked back to this malicious IP.

This IP belongs to Kroger.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

It attempted to perform a phishing attack using the POP3 server.

GET /backup.sql: Attempting to access a backup of your database.