The IP showed unusual patterns in session IDs.

This IP belongs to Microsoft Azure.

This IP belongs to United Technologies.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

This IP belongs to DigitalOcean.

It attempted to perform Clickjacking attacks on the Apache server.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

Unusual increase in server CPU usage.

A sudden surge in the number of requests per second, indicating an automated process.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

The IP was involved in a rapid sequence of login attempts.

The IP address attempted delivering malicious packets to disrupt the system's operation.

GET /.git/config: Trying to access source code or repository configuration information.

udden increase in account lockouts due to multiple failed login attempts.

It was responsible for an unusual increase in server CPU usage.

This IP belongs to Comcast.

This IP belongs to Deutsche Telecom.

It made multiple requests with the same If-None-Match header.