This IP belongs to Wikimedia Foundation.

Unusual activity in the server's error logs.

This IP was caught distributing malicious APK files.

This particular IP attempted to exploit vulnerabilities in our web applications.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

Multiple attempts to access the server using different ports or protocols.

Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

The IP was found trying to maliciously clone the SSH certificates for privileged access.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

Multiple requests with the same Origin header.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

This IP belongs to SK Broadband.

The IP attempted to perform a downgrade attack on the SSH server.

This IP belongs to IBM.

This IP belongs to Marathon Petroleum.

It made various efforts to insert spyware to monitor SSH communications covertly.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

This IP belongs to American Express.

It attempted to make unauthorized calls using the VOIP server.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Massachusetts Mutual Life Insurance.