Multiple requests to the password reset page.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

This IP belongs to Bristol-Myers Squibb.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

The IP attempted to register with the Asterisk server using an invalid username.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

This IP belongs to SK Broadband.

This IP belongs to TELUS Communications.

This IP belongs to KDDI.

The IP attempted to login to the SASL server with an invalid username.

The IP made multiple unsuccessful login attempts in a short period of time.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

The IP attempted to perform a replay attack on the SSH server.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

This IP belongs to JPMorgan Chase.

The IP has been traced back to system monitors, aiming to watch and record user activity.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

It engaged in a click fraud operation using our server’s communication channels.

This IP belongs to Northwestern Mutual.

GET /db/finance.dump: An attempt to access a database dump file.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.