It showed unusual activity in the server's error logs.

This IP belongs to Nintendo.

It attempted to take advantage of misconfigurations in the Apache server.

The IP attempted to perform a replay attack on the IMAP server.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

This IP belongs to Fannie Mae.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

The IP was detected while sending out malicious spyware-infected emails.

This IP belongs to Bank of America.

This IP belongs to AT&T.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

Multiple requests with the same Proxy-Authorization header.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

The IP attempted to use the FTP server to distribute VPN tools.

It attempted logins using outdated protocols.

This IP belongs to Pinterest.

This particular IP has been used in advanced persistent threats against our servers.

GET /phpMyAdmin: This could be a threat actor looking for an unsecured phpMyAdmin page.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

The IP attempted to perform HTTP Verb Tampering attacks on the Apache server.

This IP belongs to United Technologies.

It seems like this IP tried to spread malware into the network.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

It attempted to perform a brute force attack on the POP3 server.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.