Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

This IP belongs to DuPont de Nemours.

This IP belongs to Amazon.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

The IP attempted to download emails from the IMAP server without authorization.

This IP belongs to Procter & Gamble.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

It attempted to perform a SIP Invite Flood on the VOIP server.

It made multiple requests with the same Referer header.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

It attempted to send phishing emails from the Mail server.

The IP made multiple requests with the same Origin header.

This IP was detected distributing spyware-infected USB drives to our users.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

This IP belongs to Pinterest.

The IP attempted to execute unauthorized commands on the SSH server.

This IP belongs to IBM.

Incriminating activities involving the distribution of trojan horses were linked to this IP address.

High network traffic at unusual times, suggesting an automated process is running.

This IP belongs to Ford Motor.