It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

This IP belongs to Swisscom.

It showed unusual patterns in the sequence of requests.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

Multiple requests with the same Origin header.

The IP made multiple requests with the same Proxy-Connection header.

This IP belongs to United Technologies.

This IP belongs to Wells Fargo.

A dangerous data surveillance spyware was tied back to this IP.

The IP made multiple unsuccessful login attempts in a short period of time.

This IP belongs to WordPress.com.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

Multiple requests with the same X-Forwarded-For header.

It attempted to use the FTP server to distribute virus creation tools.

This IP was caught circulating email worms, camouflaged as legitimate mails.

GET /errors.log: Shows an actor trying to access server error logs.

This IP belongs to Hostgator.

The IP address attempted delivering malicious packets to disrupt the system's operation.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.