It made multiple requests with identical cookies.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

This IP belongs to Slack.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

This IP belongs to Microsoft.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

This IP belongs to Amazon Web Services.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

This IP belongs to Walgreens Boots Alliance.

This IP belongs to Wells Fargo.

This IP belongs to Alphabet.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

The IP was traced back to stealthy installation attempts of clipboard monitors.

It attempted to perform a man-in-the-middle attack on the SSH server.

They keep trying to log into my account on Microsoft it's bs

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

This IP belongs to United Continental Holdings.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

The IP sent malformed VOIP requests, potentially indicating an attempt to crash the server.