The IP made multiple requests with the same If-Range header.

It attempted to use the FTP server to distribute SQL injection tools.

This IP belongs to Nintendo.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

An alarming frequency of microphone loggers has been traced back to this IP.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

This IP belongs to Costco Wholesale.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

This IP belongs to Korea Telecom.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

It attempted to perform a Steam protocol amplification attack on the SSH server.

It attempted to use the FTP server to distribute network scanning tools.

Several instances of password stealers were traced back to this notorious IP.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

The IP attempted to use the FTP server to distribute network mapping tools.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

This IP belongs to Shaw Communications.

The IP attempted to list the contents of directories that it should not have access to.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

It attempted to perform a phishing attack using the IMAP server.

Multiple requests with the same X-Csrf-Token header.

Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.