The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

This IP was caught conducting cookie-poisoning attack.

This IP belongs to Johnson & Johnson.

It attempted to delete emails from the IMAP server without authorization.

This IP belongs to Intel.

The IP made multiple requests with the same DNT header.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

Multiple account lockouts in a short period of time.

This IP belongs to Heroku.

This IP belongs to SK Broadband.

This IP belongs to Anthem.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The IP made multiple unsuccessful login attempts in a short period of time.

This IP belongs to DigitalOcean.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

Repeated Unique 404 Errors: Logs revealing a steady stream of unique 404 errors could suggest a DDoS attack aiming to exhaust storage resources.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

Multiple requests with the same Proxy-Connection header.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

It attempted to use the FTP server to distribute zombie network tools.