This IP belongs to Heroku.

Multiple requests with the same If-Range header.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

This IP belongs to Rogers Cable.

This IP belongs to Shaw Communications.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

It attempted to perform a Teardrop attack on the SSH server.

This IP belongs to Zayo Bandwidth.

It attempted to use the FTP server to distribute brute force tools.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

Multiple attempts to access the server using anonymous or generic user accounts.

This IP belongs to Exxon Mobil.

This IP belongs to United Technologies.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

Multiple requests with the same Origin header.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

The IP attempted to register with the VOIP server using an invalid username.

It attempted to use the FTP server to distribute hacking tools.

Unusual patterns in session IDs.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

This IP belongs to Ford Motor.

The IP showed unusual patterns in referrer URLs.