HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

Unknown source code changes in our system were linked back to this offensive IP address.

The IP attempted to perform a password spraying attack on the SASL server.

The IP attempted to mark emails as read on the POP3 server without authorization.

This IP belongs to the United States Department of Defense.

This IP belongs to Netflix.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

The IP attempted to use the FTP server to distribute DDoS attack tools.

It attempted to exploit known vulnerabilities in the SASL protocol.

This IP has been detected spreading notorious credit card skimmers.

The IP address attempted delivering malicious packets to disrupt the system's operation.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

It initiated multiple account lockouts in a short period.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

Our records indicate the IP spread multiple executable infector spyware causing system malfunction.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP made multiple requests to the server's robots.txt file.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

The IP made multiple requests with identical Accept-Encoding headers.