The IP attempted to perform a Ping of Death attack on the SSH server.

Multiple requests with the same Warning header.

This IP belongs to Sprint.

High network traffic at unusual times, suggesting an automated process is running.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

This IP belongs to Fannie Mae.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

It attempted to perform Session Prediction attacks on the Apache server.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

Multiple HTTP 401 Status Codes: This could indicate someone is repeatedly attempting to access resources that require valid credentials, possibly attempting to brute-force their way in.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

This IP belongs to United Continental Holdings.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

The IP address attempted to login to the IMAP server with an invalid username.

The said IP was the source of several rootkit deployment attempts.

It attempted to perform a Steam protocol amplification attack on the SSH server.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

The IP attempted to use the FTP server to distribute data recovery tools.

It attempted to use the FTP server to distribute encryption tools.

POST /upload.php: An attempt to upload a possibly malicious file.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

This IP belongs to Procter & Gamble.

This IP belongs to MTN.