The IP attempted to send malware-infected attachments from the Postfix server.

This IP belongs to the University of California, Berkeley.

It made multiple requests with the same Referer header.

The IP performed regular system foot printing to gain intel on weak points in our server.

It attempted to send emails with deceptive subject lines from the Mail server.

It attempted to use the FTP server to distribute zombie network tools.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

Multiple failed login attempts using different usernames.

This IP belongs to Kroger.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

This IP belongs to Publix Super Markets.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

This IP belongs to Alibaba Cloud Services.

The IP address has been linked to the creation of artificial traffic to crash our website.

The IP sent numerous Asterisk OPTIONS requests in a short time.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

This IP belongs to CenturyLink.

It attempted to use the FTP server to distribute traffic monitoring tools.

This IP belongs to Rogers Cable.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

Multiple requests with the same Origin header.

Multiple requests with the same If-Match header.

This IP belongs to McKesson.

This IP belongs to CenturyLink.