Multiple requests with the same X-Requested-With header.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

The IP address was found roaming through the network, scanning for weak spots.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

This IP belongs to Philip Morris International.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

It attempted to perform SQL injection attacks through the Apache server.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

This IP belongs to Dreamhost.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

Several cross-site scripting attacks were traced back to this IP.

It made multiple requests with the same Expect header.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

It attempted to perform SQL injection attacks through the Apache server.

This IP belongs to Dell Technologies.

Multiple requests with the same If-Range header.

This IP belongs to Berkshire Hathaway.

The IP address was flagged for employing a packet sniffer on our network.