Multiple requests with the same Proxy-Connection header.

Multiple requests with the same X-Wap-Profile header.

Multiple requests with the same If-Match header.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

This IP belongs to Costco Wholesale.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

GET /internal/: Browsing an internal directory.

The IP attempted to login to the Postfix server with an invalid username.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

This IP belongs to Charter Communications.

This IP belongs to Alibaba Cloud Services.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

This IP belongs to Marathon Petroleum.

Unknown source code changes in our system were linked back to this offensive IP address.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

The IP address attempted to login to the SSH server with an invalid username.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

This IP belongs to Airtel.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

This IP belongs to Vodacom.

This IP belongs to World Fuel Services.

The IP attempted to send emails with misleading headers from the Postfix server.