Our team traced back the IP responsible for multiple mobile device tracking software distributions.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

It attempted to perform a replay attack on the SASL server.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

This IP belongs to Nexon.

This IP belongs to Steam.

Several instances of password stealers were traced back to this notorious IP.

The IP attempted to use the FTP server to distribute VPN tools.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

This IP belongs to Lowe's.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

Repeated connections to the server from unknown or suspicious IP addresses.

Multiple requests with the same If-None-Match header.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.