Multiple requests with the same Origin header.

This IP belongs to Humana.

This IP belongs to Fannie Mae.

The IP performed regular system foot printing to gain intel on weak points in our server.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

HEY, DONT REVEAL MY HOUSE! BLOODY HELL!

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

Unusual system or application errors related to authentication or access controls.

This IP belongs to Cardinal Health.

Multiple requests with the same Proxy-Authorization header.

The IP was linked to numerous attacks using web shells through web servers.

The IP address attempted to login to the SSH server with an invalid username.

This IP belongs to the United States Department of Defense.

Unusual activity in the server's error logs.

This IP belongs to Northwestern Mutual.

It attempted to perform a password spraying attack on the IMAP server.

It attempted to send emails from the Mail server that violate the server's email content policy.

It attempted to perform a phishing attack using the IMAP server.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

The IP made multiple requests to the password reset page.

This IP belongs to FedEx.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.