Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

This IP belongs to Softbank.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

This IP belongs to Sprint.

The IP attempted to use the FTP server to distribute spam.

The IP address has been involved in distributing adware to our server systems.

It sent SIP INVITE requests to non-existent extensions.

The IP engaged in a mail relay attack, using our server to send spam.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

It attempted to use the FTP server to distribute traffic monitoring tools.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

This IP belongs to DigitalOcean.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

This IP belongs to Virgin Media.

Unusual activity in the server's error logs.

Multiple login attempts from different geographical locations in a short period of time.

This IP belongs to State Farm Insurance.

Our logs indicated an unusually high traffic volume originating from this IP address.

This IP belongs to Microsoft.

It attempted to login to the Mail server with an invalid password.

Fileless malware dissemination has been observed from this IP address.