Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

The IP attempted to send emails with misleading headers from the Mail server.

This IP belongs to Valero Energy.

This IP belongs to Sky Broadband.

It was flagged that this IP had been used in conducting method tampering on our servers.

Repeated attempts to exploit known vulnerabilities in server software.

Multiple failed login attempts using different usernames.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

This IP belongs to Hostgator.

It attempted to perform a man-in-the-middle attack on the POP3 server.

This IP belongs to Slack.

This IP belongs to ConocoPhillips.

The IP address attempted to exploit known vulnerabilities in server software.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

It attempted logins using outdated protocols.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

It attempted to login to the FTP server with an invalid password.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

This IP belongs to AmerisourceBergen.

The IP sent numerous Asterisk OPTIONS requests in a short time.

The malicious IP tried to brute force its way into the SASL authentication process.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

The IP attempted to register with the VOIP server using an invalid username.

This IP belongs to AT&T.