It attempted to perform a SYN flood attack on the SSH server.

The IP made multiple requests with the same Warning header.

It was involved in a Distributed Denial of Service (DDoS) attack.

It attempted to use the IMAP server to relay spam.

It attempted to use the FTP server to distribute encryption tools.

The IP address made multiple requests with identical request parameters.

The IP was flagged for attempting dictionary attacks on our user accounts.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

This IP belongs to Steam.

It attempted to delete emails from the IMAP server without authorization.

This IP belongs to Globe Telecom.

It made multiple requests with the same Max-Forwards header.

It attempted to use the Postfix server to relay phishing emails to other servers.

This IP belongs to Allstate.

The IP sought to exploit the SSH-1 CRC32 vulnerability for expansive unauthorized access.

It made multiple requests with the same Max-Forwards header.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

This IP belongs to General Electric.

The IP attempted to register with the VOIP server using an invalid username.

Executed email spoofing attempts pretending to be a trusted party.

This IP was caught distributing malicious APK files.

Multiple login attempts from different geographical locations in a short period of time.