It attempted to use the FTP server to distribute phishing emails.

It made multiple requests with the same If-None-Match header.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

This IP belongs to Allstate.

This IP belongs to Freddie Mac.

The IP attempted to perform Integer Overflow attacks on the Apache server.

This IP belongs to Bank of America.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Deutsche Telecom.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

This IP belongs to Vodafone.

The IP attempted to perform a SNMP amplification attack on the SSH server.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

This IP belongs to Comcast.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

It attempted to exploit known vulnerabilities in the SSH protocol.

It attempted to send emails from the Mail server that violate the server's usage policy.

The IP attempted to perform Format String attacks on the Apache server.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

This IP belongs to NTT Docomo.