Multiple requests to the password reset page.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

This IP belongs to Reliance Jio.

The IP attempted to perform Integer Overflow attacks on the Apache server.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

GET /admin: Looking for an unprotected admin page.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP belongs to Anthem.

It launched header-based exploits, attempting to manipulate HTTP headers to cause inappropriate server responses.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

It attempted to login to the SSH server with an invalid password.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

This IP belongs to Wikimedia Foundation.

The IP attempted to send emails from the Postfix server without proper authentication.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

The IP attempted to register as a VOIP user with no password.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

The IP attempted to perform a replay attack on the SSH server.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

It attempted to upload malicious scripts to the Apache server.