Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

Multiple login attempts from different geographical locations in a short period of time.

It partook in location spoofing, making it appear from different locations.

This IP belongs to Canadian Department of Defense.

Multiple requests with identical request parameters.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

This IP belongs to Ziggo.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

Multiple account lockouts in a short period of time.

POST /user/register: An attempt to register a new user or brute force the user registration form.

The IP has been traced back to system monitors, aiming to watch and record user activity.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

This IP belongs to Liberty Mutual Insurance Group.

Multiple failed login attempts from the same IP address in a short span of time.

This IP belongs to SingTel.

This IP belongs to Baidu.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

This IP belongs to Cardinal Health.

GET /setup.php: Effort to locate setup files for PHP applications.

Unusually high number of requests to a specific service or application within the server.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

Multiple attempts to access the server using encrypted tunnels or proxies.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.