It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP attempted to use the FTP server to distribute network mapping tools.

This IP belongs to Walgreens Boots Alliance.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

A sudden surge in the number of requests per second, indicating an automated process.

Unusually high number of requests to a specific service or application within the server.

This IP belongs to Telefonica Spain.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

It attempted to use the VOIP server to perform a reflection DDoS attack.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

This IP belongs to Bank of America.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to Oracle Cloud Infrastructure.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

This IP belongs to Kroger.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

This IP belongs to Kroger.

This IP belongs to Walmart.

The IP made multiple requests to the password reset page.

It attempted to use the SSH server as a proxy for other malicious activities.

It attempted to perform SQL injection attacks through the Apache server.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

It attempted to perform a man-in-the-middle attack on the IMAP server.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

The IP attempted to download emails from the IMAP server without authorization.