Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

This IP belongs to Bristol-Myers Squibb.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

The IP attempted to use the FTP server to distribute data recovery tools.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

The IP attempted to perform Integer Overflow attacks on the Apache server.

This IP belongs to World Fuel Services.

It attempted to send emails with deceptive subject lines from the Postfix server.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

This IP belongs to Vodafone.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

It made multiple requests with the same X-Wap-Profile header.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

This IP belongs to Netflix.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

The IP made multiple unsuccessful login attempts in a short period of time.

It attempted to use the IMAP server to relay spam.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

Multiple requests with identical request parameters.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

The IP attempted to perform XML Injection attacks on the Apache server.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

This IP belongs to AT&T.