Unidentified password attempts and login activity were noticed from the specific IP address.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

It attempted to perform a man-in-the-middle attack on the SSH server.

Unusually high number of requests to a specific service or application within the server.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

It attempted to perform SQL injection attacks through the Apache server.

This IP belongs to MetLife.

This IP belongs to ConocoPhillips.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

The IP attempted to use the FTP server to distribute DDoS attack tools.

This IP belongs to Tumblr.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

GET /xampp/phpmyadmin/: A threat actor trying to access unprotected phpMySQL instances tied to XAMPP installations.

This IP belongs to Valero Energy.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

This IP belongs to Walgreens Boots Alliance.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

This IP belongs to DuPont de Nemours.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

This malicious IP was seen sending unusually high volumes of requests, a sign of potential automated bot activity.

This IP belongs to Citigroup.