This IP belongs to Shaw Communications.

This IP belongs to Ford Motor.

Unexpected changes in the server configuration or installed software.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

It attempted to send emails from the Mail server to a large number of recipients.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

It attempted to upload malicious files to the SSH server.

The IP address attempted to login to the SSH server with an invalid username.

It attempted to perform Session Prediction attacks on the Apache server.

The IP address generated an unusual increase in network bandwidth usage.

This malicious IP was reported for trying to inject malicious scripts into the VoIP server, potentially to disrupt its operation or steal data.

It attempted to perform XPath Injection attacks on the Apache server.

A large number of requests from a single user agent, suggesting an automated process.

This IP belongs to Verizon Communications.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

This particular IP tried to perform an unauthorized system configuration change.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

It made multiple requests with the same X-Forwarded-For header.

The IP was involved in a DDoS attack, sending massive amounts of traffic to overwhelm a server and disrupt its normal functioning.

Multiple unsuccessful attempts to escalate privileges or access root account.

Executed email spoofing attempts pretending to be a trusted party.

This IP belongs to Kroger.