This IP belongs to Wells Fargo.

This IP belongs to Telefonica Spain.

It attempted to use the FTP server to distribute network scanning tools.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

This IP belongs to Heroku.

This IP belongs to Marathon Petroleum.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

This malicious IP was seen sending unusually high volumes of requests, a sign of potential automated bot activity.

This IP belongs to Telstra.

The IP initiated fake traffic attacks to manipulate webpage rankings and conduct click fraud.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

Multiple requests with the same Via header.

The IP showed unusual patterns in session IDs.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

It attempted to perform a credential stuffing attack on the SSH server.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

The IP address was flagged for employing a packet sniffer on our network.

This IP belongs to Lowe's.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

This IP belongs to Citigroup.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

The IP made multiple requests with the same Origin header.

This IP belongs to United Parcel Service.