The IP made repeated attempts to authenticate with the SIP server using different usernames.

The IP under scrutiny has been associated with multiple modem hijackers.

Our team has linked several viruses dissemination activities to this IP.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

This IP belongs to Charter Communications.

The suspicious IP attempted to introduce spyware under the guise of software updates.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP address attempted to login to the Mail server with an invalid username.

GET /../htpasswd: Trying to access password files using directory traversal.

The IP made multiple requests to the server's robots.txt file.

GET /setup.php: Effort to locate setup files for PHP applications.

Multiple requests with the same X-Requested-With header.

It attempted to perform a SIP Register Flood on the SIP server.

The IP address made multiple requests with identical request parameters.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

This IP belongs to United Continental Holdings.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

The IP attempted to brute force the password to gain mail account access.

This IP belongs to United Continental Holdings.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

This IP belongs to Cigna.

Damaging activities showing connections to rootkit attacks were associated with this IP.

Login attempts from foreign IP addresses.