Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

The IP attempted to perform a Fraggle attack on the SSH server.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

It attempted to perform IP Spoofing attacks on the Apache server.

Unusual patterns in user agent strings.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

We flagged down attempts from the IP to leak backdoor viruses into the system.

This IP belongs to Travelers Cos.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

The IP attempted to perform Symlink attacks on the Apache server.

This IP belongs to Microsoft.

This IP attempted to disrupt our systems through the propagation of worms.

Multiple requests with the same Origin header.

This IP belongs to Fannie Mae.

The IP address has been involved in distributing adware to our server systems.

It attempted to perform a dictionary attack on the SSH server.

A large number of requests from a single user agent, suggesting an automated process.

The IP attempted to brute force the password to gain mail account access.

This IP belongs to United Parcel Service.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to Netflix.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.