Unusual patterns in referrer URLs.

It attempted to exploit known vulnerabilities in the SASL protocol.

The IP attempted to perform a distributed denial of service attack on the SSH server.

The said IP has been connected to attempts to distribute malicious shopping apps.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

It attempted to exploit known vulnerabilities in the FTP protocol.

It attempted to list the contents of directories that it should not have access to.

This IP belongs to Citigroup.

HEAD /: May be part of a larger Reconnaissance.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

It attempted to use the FTP server to distribute encryption tools.

This IP belongs to AT&T.

It was found initiating attack vectors to exploit SSH agent forwarding.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

This IP executed mass-probing of various ports to seek vulnerabilities.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

This IP belongs to Tyson Foods.