It attempted to perform a side channel attack on the SSH server.

This IP belongs to Telkom SA.

The IP attempted to perform a timing attack on the SSH server.

It attempted to login to the IMAP server with an invalid password.

Multiple requests with the same Proxy-Connection header.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

Excessive traffic from a single IP address.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The IP made multiple requests with the same X-UIDH header.

Multiple requests to the server's robots.txt file.

The IP exhibited unusual patterns in the Accept-Language header.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

Multiple failed login attempts from the same IP address in a short span of time.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

Unexpected changes in the server configuration or installed software.

This IP belongs to Vodacom.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

The IP attempted to send emails from the IMAP server without authorization.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

It attempted to execute unauthorized commands on the Apache server.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This IP belongs to Archer-Daniels-Midland.

It attempted to perform a denial of service attack on the SSH server.

This IP belongs to Verizon Communications.