Multiple requests with the same Referer header.

It made multiple requests with identical Accept-Charset headers.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

This IP belongs to Sprint.

It attempted to perform Race Condition attacks on the Apache server.

It attempted phishing scams by sending malicious mails through compromised accounts.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

The IP attempted to list the contents of directories that it should not have access to.

It attempted to perform SQL injection attacks through the Apache server.

This IP belongs to Reliance Jio.

Unusual patterns in the Accept-Language header.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

Several cross-site scripting attacks were traced back to this IP.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

The IP attempted to download emails from the POP3 server without authorization.

The IP attempted to gain unauthorized access to the Apache server.

The IP made multiple requests with the same X-UIDH header.

It attempted to send emails with malicious links from the Mail server.

Content Sniffing: Logs reflect HTTP requests that include the Accept header with " / ", suggesting an attacker is trying to detect what types of content the server will send.

This IP was associated with targeted spear phishing attempts against our senior staff.

This IP belongs to Vodacom.

The IP showed unusual patterns in session IDs.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

The IP attempted to mark emails as read on the IMAP server without authorization.