User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

This IP belongs to Rogers Cable.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

This IP belongs to United Technologies.

GET /login.action: Trying to find a Struts2 application to exploit.

This IP belongs to Rogers Cable.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

It attempted to perform a NTP amplification attack on the SSH server.

Multiple requests with identical POST parameters.

GET /admin: Looking for an unprotected admin page.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

This IP belongs to Chevron.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

The IP made multiple requests with the same DNT header.

The IP has been traced back to system monitors, aiming to watch and record user activity.

This IP belongs to Wells Fargo.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

It sent SIP INVITE requests to non-existent extensions.

The IP attempted to perform a Fraggle attack on the SSH server.

The IP attempted to perform a SNMP amplification attack on the SSH server.

This IP belongs to PepsiCo.

It attempted to use the POP3 server to relay phishing emails.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

This IP belongs to Target.