Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

The IP was found trying to maliciously clone the SSH certificates for privileged access.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

The IP attempted a Rootkit installation to gain root access and control server activity.

The IP attempted to bypass the SASL server's authentication mechanism.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

It attempted to perform a password spraying attack on the IMAP server.

This IP belongs to MetLife.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

This IP executed mass-probing of various ports to seek vulnerabilities.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

Our team discovered that specific IP was distributing intrusive cookie trackers.

This IP belongs to AmerisourceBergen.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

This IP belongs to United Technologies.