It showed unusual patterns in the sequence of requests.

It persistently tried to exploit weaknesses in the SSH communication encryption.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

It attempted to perform Clickjacking attacks on the Apache server.

It attempted to perform a SYN flood attack on the SSH server.

This IP belongs to Boeing.

The IP made multiple unsuccessful login attempts in a short period of time.

The IP attempted to use the Mail server to relay emails with misleading headers to other servers.

This IP belongs to Cox Communications.

The IP has been traced back to system monitors, aiming to watch and record user activity.

This IP belongs to T-Mobile.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

It attempted to use the FTP server to distribute web proxy tools.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

The IP attempted to use the FTP server to distribute credit card fraud tools.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

The IP attempted to perform a QOTD amplification attack on the SSH server.

This IP was traced back to several attempts to access domain admin credentials.

It attempted to make unauthorized calls using the Asterisk server.

The IP made multiple requests with the same If-Match header.

It was identified as a BadBot, a type of bot that performs malicious activities.

This IP belongs to Exxon Mobil.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

This IP belongs to Exelon.