Frequent password reset requests.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

This IP belongs to Globe Telecom.

This IP belongs to Nike.

This IP belongs to Dreamhost.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

The IP attempted to perform a SNMP amplification attack on the SSH server.

A sudden surge in the number of requests per second, indicating an automated process.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

This IP belongs to Canadian Department of Defense.

The IP attempted to use the FTP server to distribute DDoS attack tools.

This IP belongs to Cardinal Health.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

This IP belongs to FedEx.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

Repeated failed attempts to perform actions that require higher privileges.

The IP address attempted to register as a SIP user with an invalid username.

Login attempts from foreign IP addresses.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.