The IP attempted reconnaissance activities, trying to footprint our server’s network.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

This IP belongs to 3M.

This IP belongs to IBM.

Never seen this IP on my device before... Running no vpn/proxy, and I'm located in Cleveland Ohio

It attempted to perform a session hijacking attack on the SSH server.

Multiple requests with the same Warning header.

This IP belongs to 3M.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

This IP was associated with targeted spear phishing attempts against our senior staff.

This IP belongs to Johnson & Johnson.

This IP belongs to Gilead Sciences.

This IP belongs to MTN.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

It sent VOIP requests to non-existent extensions.

This IP belongs to Bank of America.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP performed regular system foot printing to gain intel on weak points in our server.

This IP belongs to SingTel.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

This IP belongs to Swisscom.

Attempts to access the server using known malicious IP addresses or domains.