Multiple requests with the same If-Range header.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It attempted to use the FTP server to distribute pirated software.

This IP belongs to Nintendo.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

This IP belongs to Johnson & Johnson.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

It attempted to download sensitive files from the FTP server.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

This IP belongs to America Movil.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

The IP address attempted to exploit known vulnerabilities in server software.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP belongs to CVS Health.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

The IP attempted to perform a SIP Register Flood on the VOIP server.