The IP attempted to use the FTP server as a proxy for other malicious activities.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

This IP belongs to Humana.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

This IP has been marked as the origin of numerous SQL injection attacks.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

The IP attempted to download sensitive files from the SSH server.

This IP belongs to Telstra.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

Our team discovered that specific IP was distributing intrusive cookie trackers.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

This IP belongs to Intel.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

This IP belongs to Facebook.

The IP attempted to gain unauthorized access to the Apache server.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

This IP belongs to Walmart.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

The IP attempted to perform a Kad network amplification attack on the SSH server.

It attempted to use the SASL server to distribute malware.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

This IP belongs to Amazon.

The IP attempted to perform Integer Overflow attacks on the Apache server.

Multiple requests with the same Warning header.