The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

This IP belongs to Linode.

Unusually high number of requests to the login page.

Attempts to access the server using unusual HTTP methods or request types.

This IP belongs to DuPont de Nemours.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

The IP made multiple requests with the same Proxy-Connection header.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

This IP belongs to DuPont de Nemours.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

It attempted to perform a phishing attack using the POP3 server.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

Multiple requests with the same Proxy-Authorization header.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

This IP belongs to UnitedHealth Group.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

This IP executed mass-probing of various ports to seek vulnerabilities.

This IP belongs to Mondelez International.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

Unusual increase in network bandwidth usage.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.