Multiple requests with the same X-Forwarded-For header.

This IP belongs to NTT Docomo.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

Multiple requests with identical POST parameters.

It was responsible for an unusual increase in server CPU usage.

This IP belongs to Alphabet.

This IP belongs to Anthem.

This IP belongs to Ford Motor.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

The IP sent numerous Asterisk OPTIONS requests in a short time.

The IP made multiple unsuccessful login attempts in a short period of time.

Unexpected changes in the server configuration or installed software.

Multiple login attempts from different geographical locations in a short period of time.

It attempted to perform IP Spoofing attacks on the Apache server.

This IP belongs to IBM.

It made various efforts to insert spyware to monitor SSH communications covertly.

Login attempts that do not follow typical user behavior patterns.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

The IP attempted to perform a dictionary attack on the IMAP server.

This IP belongs to General Electric.

This IP was detected uploading malicious codes in our network.

It appears that this IP was initiating DNSChanger malware attacks on our network.

The IP made multiple requests with the same Proxy-Authorization header.