Multiple requests with the same If-None-Match header.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

It attempted to send phishing emails from the Mail server.

This IP was implicated in attempts to inject ransomware into our systems.

Unusual increase in network bandwidth usage.

This IP belongs to AT&T.

The IP made multiple requests with the same Origin header.

The IP attempted to use the FTP server to distribute network mapping tools.

This IP belongs to Marathon Petroleum.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

This IP belongs to the University of California, Berkeley.

This IP belongs to Best Buy.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

The IP was involved in attempts of defacing the Apache server website.

GET /vuln.html: Looking for any page vulnerabilities.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

It attempted to perform a phishing attack using the POP3 server.

The IP was seen launching a DDoS attack on the Asterisk server, overwhelming it with traffic to disrupt its normal functioning.

Unusual patterns in the sequence of requests.

It seems like this IP tried to spread malware into the network.

This IP belongs to Caterpillar.