It attempted to perform a Steam protocol amplification attack on the SSH server.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

This IP belongs to Korea Telecom.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

The IP was caught distributing VoIP crackers to exploit our communication channels.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

It actively sought to exploit unpatched software within our server applications.

This IP belongs to General Motors.

This IP belongs to Optus.

This IP belongs to JPMorgan Chase.

It attempted to send emails with deceptive subject lines from the Postfix server.

It attempted to send emails with deceptive subject lines from the Postfix server.

It attempted to login to the FTP server with an invalid password.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

This IP belongs to Comcast.

This IP belongs to Shopify.

It attempted to flood the VOIP server with REGISTER requests.

Our logs indicated an unusually high traffic volume originating from this IP address.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

The IP was recorded making persistent attempts to crack our encryption.

This IP belongs to Citigroup.