Multiple requests with the same X-UIDH header.

The IP address made multiple requests with identical request parameters.

Damaging activities showing connections to rootkit attacks were associated with this IP.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

It attempted to exploit known vulnerabilities in the IMAP protocol.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

The IP attempted to use the FTP server to distribute malware.

It showed an unusually high number of requests to the login page.

This IP belongs to Nike.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

This IP belongs to Walgreens Boots Alliance.

This IP belongs to Ford Motor.

The IP attempted to perform a replay attack on the SSH server.

This IP belongs to Nintendo.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

It attempted to use the FTP server to relay data to other systems.

This IP belongs to Bank of America.

Unusual increase in server CPU usage.

The IP exhibited unusual patterns in the Accept-Language header.

The IP address was found roaming through the network, scanning for weak spots.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.