It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP attempted to perform Symlink attacks on the Apache server.

The IP attempted to perform HTTP Verb Tampering attacks on the Apache server.

The IP attempted to download emails from the POP3 server without authorization.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

The IP was involved in a rapid sequence of login attempts.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

This IP belongs to AT&T.

The IP has been implicated in multiple cases of URL manipulation attempts.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

It attempted to perform a Smurf attack on the SSH server.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

It attempted to perform XPath Injection attacks on the Apache server.

It attempted to login to the Postfix server with an invalid password.

This IP belongs to MetLife.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

The IP attempted to use the SSH server to relay data to other systems.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

The IP tried creating false server responses hoping to disrupt the SASL service.

This IP belongs to Facebook.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

It tried to execute dictionary attacks on our Mail service causing potential delays.