It attempted to use the FTP server to distribute terrorist propaganda.

Unexpected HTTP Methods Usage: Frequent HTTP TRACE method attempts could be an attempt to intercept network requests.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

The IP attempted to use the FTP server to distribute anonymizing tools.

The IP attempted to use the FTP server to distribute credit card fraud tools.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

This IP belongs to Dow Chemical.

It made multiple requests with the same Range header.

This IP belongs to Honeywell International.

This IP belongs to TIAA.

This IP belongs to Oracle Cloud Infrastructure.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

Repeated attempts to use the same password across multiple accounts.

This IP belongs to United Continental Holdings.

This IP belongs to GoDaddy.

Multiple requests with the same Max-Forwards header.

Several instances of aggressive advertising spyware have been linked to this IP.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

It attempted to perform Session Sidejacking attacks on the Apache server.