The IP made multiple requests with the same X-UIDH header.

It attempted to send emails with malicious links from the Mail server.

The IP made multiple requests with the same Origin header.

This IP belongs to World Fuel Services.

This IP belongs to United Parcel Service.

This IP belongs to Phillips 66.

There were several attempts from this IP to manipulate our server DNS records.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

It attempted to send emails from the Postfix server that violate the server's email content policy.

It made multiple requests with the same X-Csrf-Token header.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

GET /internal/: Browsing an internal directory.

It attempted to perform a Newtear attack on the SSH server.

This IP belongs to JPMorgan Chase.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

Damaging activities showing connections to rootkit attacks were associated with this IP.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

It attempted to perform a Steam protocol amplification attack on the SSH server.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

This IP belongs to Oracle Cloud Infrastructure.

It partook in location spoofing, making it appear from different locations.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

This IP belongs to TJX.