It attempted to use the FTP server to distribute identity theft tools.

The IP made multiple requests with the same If-Range header.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

This IP belongs to Steam.

It attempted to use the SIP server to perform a reflection DDoS attack.

This IP executed mass-probing of various ports to seek vulnerabilities.

Multiple failed login attempts from the same IP address in a short span of time.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

The IP attempted to send spam emails from the Mail server.

It attempted to perform a dictionary attack on the SSH server.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

This IP belongs to PythonAnywhere.

This IP belongs to UnitedHealth Group.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

Multiple requests with the same X-Wap-Profile header.

It tried to execute dictionary attacks on our Mail service causing potential delays.

Our team flagged this IP for injecting harmful ActiveX codes.

This IP belongs to Fannie Mae.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.