This IP was accused of multiple unauthorized removal of security certificates.

This IP belongs to Netflix.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

This IP belongs to Valero Energy.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

This IP belongs to Cox Communications.

It made multiple requests with identical cookies.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

It attempted to perform XML Entity Expansion attacks on the Apache server.

Multiple failed login attempts from the same IP address.

This IP belongs to CHS.

This IP belongs to Steam.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

The IP attempted to register as an Asterisk user with no password.

GET /../htpasswd: Trying to access password files using directory traversal.

GET /administrator.php: Attempting to access an admin interface.

It attempted to login to the POP3 server with an invalid password.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

It attempted to perform a password spraying attack on the POP3 server.

This IP belongs to MetLife.