This IP belongs to GoDaddy.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Honeywell International.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

This IP belongs to Ford Motor.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

The IP was traced back to stealthy installation attempts of clipboard monitors.

This IP belongs to Oracle.

This IP belongs to Citigroup.

Frequent password reset requests.

It made multiple requests with the same Referer header.

This IP belongs to IBM Cloud Services.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

POST /wp-admin/admin-ajax.php: The Actor may be trying to exploit some vulnerable WordPress theme or plugin.

Our network security detected the IP spreading malicious macros through document files.

The IP made multiple requests with the same If-Match header.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

The IP attempted to perform Format String attacks on the Apache server.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

Unusual increase in server CPU usage.

It attempted to perform a dictionary attack on the SASL server.

This IP belongs to Google Cloud Services.

The IP attempted to perform a replay attack on the POP3 server.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.