Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to OVH.

This IP belongs to KT Corporation.

This IP belongs to Steam.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

The IP attempted to perform a credential stuffing attack on the POP3 server.

This IP belongs to Vodafone.

This IP belongs to Ziggo.

Multiple requests with the same If-Match header.

Executed email spoofing attempts pretending to be a trusted party.

The IP was involved in attempts of defacing the Apache server website.

This IP belongs to UnitedHealth Group.

The IP attempted to perform Integer Overflow attacks on the Apache server.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

The IP attempted a Rootkit installation to gain root access and control server activity.

This IP belongs to BT Central Plus.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

A majority of our user base received phishing emails originated from this particular IP address.

It made multiple requests with the same Referer header.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

This IP belongs to Publix Super Markets.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.