Multiple requests with the same If-None-Match header.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

It initiated multiple account lockouts in a short period.

It attempted to perform IP Spoofing attacks on the Apache server.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

This IP belongs to United Technologies.

A series of unusual file transfers originated from this IP.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

This IP was associated with targeted spear phishing attempts against our senior staff.

This IP belongs to Lowe's.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

It attempted to use the SASL server to relay spam.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

The IP attempted to perform a Ping of Death attack on the SSH server.

This IP belongs to Walgreens Boots Alliance.

The IP made multiple requests with the same TE header.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

It made multiple requests with the same X-Wap-Profile header.

The IP made multiple requests with the same Warning header.

This IP belongs to Best Buy.

Executed email spoofing attempts pretending to be a trusted party.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

It attempted to exploit known vulnerabilities in the FTP protocol.

Executed email spoofing attempts pretending to be a trusted party.