This IP belongs to GoDaddy.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It attempted to perform a phishing attack using the IMAP server.

The IP attempted to brute force the password to gain mail account access.

This IP belongs to IBM.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

It attempted to use the FTP server to distribute encryption tools.

The IP attempted to perform a SIP Invite Flood on the SIP server.

This IP belongs to Apple.

This IP belongs to Netflix.

Login attempts that do not follow typical user behavior patterns.

The IP attempted to perform Session Replay attacks on the Apache server.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

This IP belongs to United Continental Holdings.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

It attempted to perform Web Service attacks on the Apache server.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

It attempted to perform a VOIP Hopper scan on the Asterisk server.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

Our network security detected the IP spreading malicious macros through document files.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

This particular IP tried to perform an unauthorized system configuration change.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.