Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

Repeated attempts to alter or delete log files to cover tracks.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

GET /vuln.html: Looking for any page vulnerabilities.

This IP belongs to Home Depot.

This IP belongs to T-Mobile.

This IP belongs to The Walt Disney Company.

This IP belongs to MetLife.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

The IP attempted to use the FTP server to distribute rootkit software.

It attempted to perform a Steam protocol amplification attack on the SSH server.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

This IP belongs to Boeing.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

This IP was detected initiating zero-day exploit attacks on our system.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.