The IP launched timing attacks, trying to understand our server timings for potential future exploits.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

This IP belongs to Comcast.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP belongs to Costco Wholesale.

This IP belongs to Boeing.

This IP belongs to Telkom SA.

It attempted to use the FTP server to distribute wireless cracking tools.

This IP belongs to Virgin Media.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

The IP attempted to perform Stack Overflow attacks on the Apache server.

The IP address attempted to login to the Mail server with an invalid username.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

It attempted to exploit known vulnerabilities in the SASL protocol.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

This IP belongs to MTS (Mobile TeleSystems).

It attempted to perform a SIPVicious scan on the SIP server.

The IP exhibited unusual patterns in the Accept-Language header.

This IP belongs to Dropbox.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

This IP belongs to The Hartford Financial Services.

It attempted to send emails from the Mail server that violate the server's usage policy.