The IP made multiple requests to the password reset page.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

This IP belongs to Softbank.

The IP attempted to use the Mail server to relay spam to other servers.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

This IP belongs to FedEx.

The IP made multiple requests with the same DNT header.

This IP was distributing rogue security software, misleading users to think their systems are infected.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

Multiple requests with the same Expect header.

The IP attempted to bypass the SASL server's authentication mechanism.

Suspicious Http Referrer Field: HTTP requests with external referrer headers that usually originate from internal source.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

This IP belongs to Microsoft Azure.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

This IP belongs to Netflix.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

It attempted to perform a RIPv1 amplification attack on the SSH server.

It attempted to use the FTP server to distribute pirated software.

This IP belongs to GoDaddy.

It attempted to perform Session Sidejacking attacks on the Apache server.

The IP attempted to perform Symlink attacks on the Apache server.

The IP made multiple requests using uncommon HTTP methods.