It attempted to use the FTP server to distribute botnet command and control software.

This IP belongs to Citigroup.

The IP made multiple requests with the same DNT header.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

The IP exhibited unusual patterns in the Accept-Language header.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP attempted to perform a timing attack on the SSH server.

This IP belongs to Facebook.

This IP belongs to AT&T.

The IP's involvement in spreading password stealers has compromised our network's protection.

It attempted to perform a Chargen amplification attack on the SSH server.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

HEAD /: May be part of a larger Reconnaissance.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

It attempted to send phishing emails from the Postfix server.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

Multiple account lockouts in a short period of time.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

Our team flagged this IP for injecting harmful ActiveX codes.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.