It showed unusual patterns in the sequence of requests.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

This IP belongs to General Dynamics.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

It launched header-based exploits, attempting to manipulate HTTP headers to cause inappropriate server responses.

POST /upload.php: An attempt to upload a possibly malicious file.

It attempted to send emails from the Mail server that violate the server's usage policy.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

This IP belongs to Gilead Sciences.

This IP belongs to Zayo Bandwidth.

It attempted to use the POP3 server to relay phishing emails.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

It attempted to use the FTP server to distribute password cracking tools.

This IP attempted to disrupt our systems through the propagation of worms.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP belongs to Morgan Stanley.

This IP belongs to Bristol-Myers Squibb.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

It attempted to perform a session hijacking attack on the SSH server.

The IP address made multiple requests with identical request parameters.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.