Multiple requests with the same If-Range header.

The malicious IP tried to brute force its way into the SASL authentication process.

The IP attempted to upload malicious files to the FTP server.

Multiple attempts to access the server using encrypted tunnels or proxies.

This malicious IP was reported for trying to inject malicious scripts into the VoIP server, potentially to disrupt its operation or steal data.

The IP address attempted to login to the IMAP server with an invalid username.

This IP belongs to Telkom SA.

This IP belongs to General Electric.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

This IP belongs to Cloudfare.

The IP address made multiple requests with identical request parameters.

This IP belongs to Tech Data.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

This IP was involved in deploying stealthy credential stealers in our network.

This IP belongs to Lockheed Martin.

This IP belongs to Sky Broadband.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

This IP belongs to Twenty-First Century Fox.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.