The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

This IP belongs to Home Depot.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

The IP made multiple requests with the same Via header.

It attempted to use the Postfix server to relay spam to other servers.

It attempted to use the FTP server to relay data to other systems.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

This IP belongs to Citigroup.

It attempted to perform Buffer Overflow attacks on the Apache server.

This IP belongs to Wells Fargo.

The said IP has been connected to attempts to distribute malicious shopping apps.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

It attempted to use the FTP server to distribute identity theft tools.

It was found that the IP had deployed rogue security software in our system.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

The IP address attempted delivering malicious packets to disrupt the system's operation.

Multiple requests with the same Expect header.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

Multiple attempts to access the server using anonymous or generic user accounts.