We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP made multiple unsuccessful login attempts in a short period of time.

This IP belongs to Archer-Daniels-Midland.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

Unusual patterns of behavior, such as login attempts at regular intervals or sequential patterns in the attempted passwords.

This IP belongs to Walmart.

Login attempts using old or outdated protocols.

This IP belongs to Telstra.

The IP attempted to perform a brute force attack on the SASL server.

The IP attempted to perform a password spraying attack on the SASL server.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

This IP belongs to Time Warner Cable Internet.

The IP attempted to use the FTP server to distribute hacking tutorials.

This IP belongs to JPMorgan Chase.

The IP attempted to register as a SIP user with no password.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

This IP belongs to the University of California, Berkeley.

It was flagged that this IP had been used in conducting method tampering on our servers.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

It attempted to login to the FTP server with an invalid password.

This IP belongs to Optus.