This IP belongs to Liberty Mutual Insurance Group.

Multiple requests with the same Warning header.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

Our system blocked an attempted Code Injection attack from this IP.

Multiple requests with identical request parameters.

This IP belongs to Hong Kong Broadband Network.

Unusual activity in the server's error logs.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

This IP belongs to Microsoft.

This IP belongs to Pinterest.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It attempted to use the FTP server to distribute password recovery tools.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

It attempted to perform a phishing attack using the IMAP server.

The IP attempted to use the FTP server to distribute rootkit software.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

This IP belongs to Time Warner Cable Internet.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

GET /administrator.php: Attempting to access an admin interface.

It attempted logins using outdated protocols.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.