Multiple requests with the same Referer header.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

This particular IP has been used in advanced persistent threats against our servers.

This IP belongs to Lowe's.

There were several attempts from this IP to manipulate our server DNS records.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

It made multiple requests with the same X-Csrf-Token header.

This IP was caught conducting cookie-poisoning attack.

Unusual increase in server CPU usage.

The IP attempted to perform Integer Overflow attacks on the Apache server.

This IP belongs to Exxon Mobil.

It attempted to perform a dictionary attack on the SASL server.

This IP belongs to MTS (Mobile TeleSystems).

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

This IP belongs to World Fuel Services.

It attempted to take advantage of misconfigurations in the Apache server.

It made multiple requests with the same X-Csrf-Token header.

The IP exhibited unusual patterns in the Accept-Language header.

This IP belongs to Comcast.

It attempted to send emails with malicious links from the Postfix server.

The IP attempted to mark emails as read on the POP3 server without authorization.

This IP belongs to Citigroup.

The IP attempted to send emails from the Postfix server without proper authentication.