It attempted to perform SQL injection attacks through the Apache server.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.

This IP belongs to Chevron.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

This IP belongs to Apple.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

Repeated failed attempts to perform actions that require higher privileges.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

The IP attempted to use the FTP server to distribute VPN tools.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

Unusual patterns of behavior, such as login attempts at regular intervals or sequential patterns in the attempted passwords.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

It attempted to make unauthorized calls using the SIP server.

This IP belongs to Walmart.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

Login attempts from foreign IP addresses.

Repeated failed attempts to perform actions that require higher privileges.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The IP attempted to perform a password spraying attack on the SASL server.