It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

This IP was detected uploading malicious codes in our network.

It attempted to perform a Chargen amplification attack on the SSH server.

The IP made multiple requests with the same TE header.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

The IP address attempted to exploit known vulnerabilities in server software.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

This IP belongs to Abbott Laboratories.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

It attempted to login to the POP3 server with an invalid password.

This IP belongs to Cloudfare.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

GET /internal/: Browsing an internal directory.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

This IP belongs to Fannie Mae.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

This IP belongs to UnitedHealth Group.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

The IP was caught attempting to execute heap overflow attacks.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

It persistently tried to exploit weaknesses in the SSH communication encryption.