It attempted to perform SQL injection attacks through the Apache server.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

The IP made multiple requests with the same Via header.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

It attempted to use the Postfix server to relay phishing emails to other servers.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

Unusual patterns in session IDs.

This IP belongs to Phillips 66.

It attempted to flood the Asterisk server with REGISTER requests.

This IP belongs to Virgin Media.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

The IP attempted to perform a dictionary attack on the POP3 server.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

An identity theft activity was linked back to this malicious IP.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

It made multiple requests with identical Accept-Charset headers.

The IP attempted to use the FTP server to distribute malware.