Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

It attempted to use the FTP server to distribute terrorist propaganda.

It attempted to perform a SIP Invite Flood on the VOIP server.

This IP belongs to Softbank.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

This IP belongs to Marathon Petroleum.

The IP made multiple requests with the same Warning header.

Multiple requests with the same Origin header.

The IP tried to crack S/MIME encryption for accessing secured email contents.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

It attempted to login to the FTP server with an invalid password.

This IP belongs to GitHub.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

This IP belongs to GoDaddy.

This IP belongs to Abbott Laboratories.

This IP belongs to PLDT.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

This IP belongs to Gilead Sciences.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

POST /upload.php: An attempt to upload a possibly malicious file.

It attempted to login to the POP3 server with an invalid password.

This IP was traced back to several attempts to access domain admin credentials.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.