The IP attempted to send emails from the Mail server pretending to be from a different sender.

This IP belongs to Archer-Daniels-Midland.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

This IP belongs to Humana.

This IP belongs to Korea Telecom.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

This IP belongs to the University of California, Berkeley.

It was discovered illicitly scanning the server for potential vulnerabilities.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

The IP attempted to register with the Asterisk server using an invalid username.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

The IP made multiple requests with the same X-UIDH header.

POST /user/register: An attempt to register a new user or brute force the user registration form.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

This IP belongs to Plusnet.

This IP belongs to Facebook.

It initiated requests to non-existent endpoints.

It attempted to perform a phishing attack using the POP3 server.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

The IP attempted to perform a SIP Register Flood on the VOIP server.

This IP belongs to Berkshire Hathaway.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

It attempted to exploit known vulnerabilities in the POP3 protocol.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.