The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

Multiple requests with the same Referer header.

This IP belongs to Exxon Mobil.

The IP attempted to perform Directory Traversal attacks on the Apache server.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

The IP was caught distributing VoIP crackers to exploit our communication channels.

This IP belongs to Costco Wholesale.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This IP belongs to TJX.

It showed unusual activity in the server's error logs.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

This IP belongs to Lockheed Martin.

It attempted to perform XML Entity Expansion attacks on the Apache server.

This IP belongs to Time Warner Cable Internet.

It attempted to send emails from the Mail server that violate the server's usage policy.

This IP belongs to Best Buy.

The IP attempted to use the SASL server to relay phishing emails.

The IP attempted to perform Format String attacks on the Apache server.