POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

Damaging activities showing connections to rootkit attacks were associated with this IP.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

It made multiple requests from user agents claiming to be bots.

The IP was flagged for attempting dictionary attacks on our user accounts.

This IP belongs to Abbott Laboratories.

This IP belongs to State Farm Insurance.

The IP attempted to use the POP3 server to distribute malware.

It attempted to perform a Teardrop attack on the SSH server.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

This IP belongs to TJX.

The IP address attempted to login to the FTP server with an invalid username.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The IP attempted to mark emails as read on the IMAP server without authorization.

It attempted to perform a dictionary attack on the SSH server.

It attempted to take advantage of misconfigurations in the Apache server.

It made multiple requests with identical POST parameters.

The IP attempted to login to the SASL server with an invalid username.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

Multiple failed login attempts from the same IP address.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.