Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

This IP belongs to Amazon.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

The IP address has been involved in distributing adware to our server systems.

The IP made multiple unsuccessful login attempts in a short period of time.

This IP belongs to Lowe's.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

It sent VOIP requests to non-existent extensions.

It made multiple requests with the same If-None-Match header.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

This IP belongs to Nexon.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

It attempted to perform Clickjacking attacks on the Apache server.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

This IP belongs to Pfizer.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

This IP belongs to Virgin Media.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

This IP belongs to Boeing.

It attempted to list the contents of directories that it should not have access to.