The IP attempted to bypass IP blacklisting by rapidly changing its IP address.

This IP belongs to Walmart.

Repeated attempts to use the same password across multiple accounts.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

It attempted to flood the SIP server with REGISTER requests.

The IP attempted to perform a SIP Invite Flood on the SIP server.

The IP address attempted to register as a SIP user with an invalid username.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

Repeated failed attempts to perform actions that require higher privileges.

This IP belongs to Gilead Sciences.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

The IP attempted to perform a brute force attack on the SSH server.

Multiple login attempts from different geographical locations in a short period of time.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

This IP was caught conducting cookie-poisoning attack.

GET /backup.sql: Attempting to access a backup of your database.

The IP attempted to perform a replay attack on the SSH server.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

It attempted to login to the FTP server with an invalid password.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

The IP attempted to bypass the SASL server's authentication mechanism.

Multiple requests to the password reset page.