Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

We observed the IP distributing harmful document tracking tools.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

This IP belongs to Xbox Live.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

Unusual patterns in user agent strings.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

This IP belongs to Sysco.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

This IP belongs to IBM.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

The IP made multiple requests using uncommon HTTP methods.

This IP belongs to Marathon Petroleum.

The IP address generated an unusual increase in network bandwidth usage.

The IP attempted to download emails from the IMAP server without authorization.

This IP belongs to Walgreens Boots Alliance.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

It sent Asterisk requests to non-existent extensions.