It attempted to perform a SYN flood attack on the SSH server.

Repeated attempts to use the same password across multiple accounts.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP made multiple requests to the server's robots.txt file.

This IP was detected initiating zero-day exploit attacks on our system.

This IP belongs to KDDI.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

It launched a botnet to infiltrate our Apache-DDoS service.

This IP belongs to Home Depot.

This IP belongs to State Farm Insurance.

Multiple requests with the same Proxy-Authorization header.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

It attempted to use the SSH server as a proxy for other malicious activities.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

GET /cgi-bin/test.cgi: Could indicate the threat actor is trying to exploit older, less secure scripting interfaces.

It attempted to use the FTP server to distribute password recovery tools.

Our team flagged this IP for injecting harmful ActiveX codes.

It attempted to send phishing emails from the Mail server.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

It utilized Web scrapers, automatically harvesting content from our server.

It attempted to use the IMAP server to relay spam.

Multiple requests with the same Origin header.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.