A sudden surge in the number of requests per second, indicating an automated process.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

The IP attempted to perform a password spraying attack on the SSH server.

This IP belongs to General Electric.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

The IP sent numerous VOIP OPTIONS requests in a short time.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

The IP showed unusual patterns in referrer URLs.

This particular IP has been used in advanced persistent threats against our servers.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

This IP belongs to Archer-Daniels-Midland.

This IP belongs to SK Broadband.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

This IP belongs to GoDaddy.

Our data indicates this IP has performed data breaches by launching phishing attacks.

This IP belongs to Vodacom.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

This IP belongs to American Airlines Group.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

It attempted to use the POP3 server to relay phishing emails.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

This IP belongs to Cloudfare.

This IP belongs to the University of California, Berkeley.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.