It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

Our system flagged this IP as conducting fraudulent transactions activities.

This IP belongs to Bristol-Myers Squibb.

This IP belongs to Canadian Department of Defense.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

This IP belongs to MetLife.

The IP attempted to list the contents of directories that it should not have access to.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

This IP belongs to Abbott Laboratories.

A sudden surge in the number of requests per second, indicating an automated process.

This IP belongs to Humana.

Identification of Known Vulnerabilities: Attempts to exploit known vulnerabilities related to your server application.

This IP belongs to Hostgator.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

The IP attempted to perform a Kad network amplification attack on the SSH server.

The IP attempted to use the Mail server to relay phishing emails to other servers.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

This IP belongs to Xbox Live.