Multiple requests with the same Range header.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

POST /user/register: An attempt to register a new user or brute force the user registration form.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

Unusual activity in the server's error logs.

This IP belongs to GitHub.

The IP attempted to upload malicious files to the FTP server.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

The IP was detected while sending out malicious spyware-infected emails.

This IP belongs to Kraft Heinz.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

This IP belongs to WordPress.com.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

This IP was caught conducting cookie-poisoning attack.

Multiple requests with the same Proxy-Authorization header.

This IP belongs to Bristol-Myers Squibb.

The IP attempted to download emails from the IMAP server without authorization.

It attempted to perform a man-in-the-middle attack on the POP3 server.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

This IP was associated with targeted spear phishing attempts against our senior staff.