This IP belongs to FedEx.

This IP belongs to Nintendo.

This IP was accused of multiple unauthorized removal of security certificates.

It showed an unusually high number of requests to the login page.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

The IP showed unusual patterns in referrer URLs.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

This IP belongs to Publix Super Markets.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

The IP has been implicated in multiple cases of URL manipulation attempts.

This IP belongs to Best Buy.

This IP belongs to Verizon.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

It attempted to login to the FTP server with an invalid password.

This IP belongs to Marathon Petroleum.

Content Sniffing: Logs reflect HTTP requests that include the Accept header with " / ", suggesting an attacker is trying to detect what types of content the server will send.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

It attempted to use the Postfix server to relay emails with malicious links to other servers.