Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

It made multiple requests with the same Referer header.

It attempted to exploit known vulnerabilities in the SSH protocol.

This IP belongs to PepsiCo.

This IP belongs to Morgan Stanley.

This IP belongs to Virgin Media.

This IP belongs to United Parcel Service.

This IP belongs to Freddie Mac.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

Our team discovered that specific IP was distributing intrusive cookie trackers.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

This IP belongs to Dreamhost.

This IP belongs to United Parcel Service.

It attempted to exploit known vulnerabilities in the SASL protocol.

This IP belongs to Deutsche Telekom AG.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

This IP belongs to America Movil.

It initiated multiple account lockouts in a short period.

This IP belongs to Microsoft Azure.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

It made multiple requests with identical POST parameters.