This IP belongs to Heroku.

Multiple requests with the same DNT (Do Not Track) header.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

Multiple requests to the same endpoint in a short period of time.

It attempted to send emails from the Postfix server to a large number of recipients.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

This IP belongs to Sky Broadband.

This IP belongs to Home Depot.

Multiple requests with the same X-Wap-Profile header.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This IP belongs to Allstate.

This IP was involved in deploying stealthy credential stealers in our network.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

It attempted to use the SIP server to perform a reflection DDoS attack.

This IP belongs to America Movil.

This IP belongs to Target.

Multiple requests with the same Origin header.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

It attempted to perform Race Condition attacks on the Apache server.

It attempted to make unauthorized calls using the Asterisk server.

This IP belongs to Ford Motor.