Multiple requests with the same If-Range header.

This IP belongs to Netflix.

It attempted to use the FTP server to distribute traffic monitoring tools.

It made multiple requests with the same X-Csrf-Token header.

It attempted to send emails with malicious links from the Postfix server.

This IP belongs to General Motors.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

It attempted to use the FTP server to distribute web proxy tools.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

Multiple login attempts from different geographical locations in a short period of time.

This IP belongs to Sysco.

The IP has initiated several exploits, specifically for software vulnerabilities.

It was responsible for an unusual increase in server CPU usage.

This IP belongs to Nike.

This IP belongs to Lowe's.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

This IP belongs to KT Corporation.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

It made multiple requests with identical cookies.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

This IP has been marked as the origin of numerous SQL injection attacks.

We observed the IP distributing harmful document tracking tools.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.