The IP made multiple requests with the same Proxy-Authorization header.

The IP attempted to perform SOAP Injection attacks on the Apache server.

This IP belongs to IBM.

This IP belongs to Bristol-Myers Squibb.

This IP belongs to Anthem.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

It made multiple requests from user agents claiming to be bots.

It attempted to delete emails from the POP3 server without authorization.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

Attempts to access the server using unusual HTTP methods or request types.

The IP attempted to login to the SASL server with an invalid username.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

This IP has been identified as running a botnet targeting our server systems with ransomware.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

The IP address attempted to login to the FTP server with an invalid username.

This IP belongs to Goldman Sachs Group.

This IP belongs to Softbank.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

It initiated requests to non-existent endpoints.

This IP belongs to CenturyLink.

This IP belongs to ConocoPhillips.

This IP belongs to Cloudfare.

This IP belongs to Apple.