Multiple attempts to access the server using anonymous or generic user accounts.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

The IP attempted to send spam emails from the Mail server.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

This IP belongs to State Farm Insurance.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

It attempted to perform XML Entity Expansion attacks on the Apache server.

This IP attempted to disrupt our systems through the propagation of worms.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This IP was found responsible for a session hijacking attempt on our network.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

Multiple requests with the same If-Match header.

The IP attempted to login to the Postfix server with an invalid username.

It attempted logins using outdated protocols.

The IP was found to be behind numerous fileless malware attacks.

This IP belongs to General Electric.

It launched a botnet to infiltrate our Apache-DDoS service.

The IP was detected attempting to skirt our system's detection through spoofing.

This IP belongs to Amazon Web Services.

The IP attempted to send emails with misleading headers from the Mail server.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.