The IP address attempted delivering malicious packets to disrupt the system's operation.

This IP belongs to General Motors.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

This IP belongs to Allstate.

This particular IP has been used in advanced persistent threats against our servers.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

Repeated attempts to access rarely used or hidden services on the server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

Multiple requests with the same If-Match header.

Multiple requests with the same Range header.

This IP was caught conducting cookie-poisoning attack.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

This IP belongs to Lowe's.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

It made multiple requests with the same Referer header.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

Multiple attempts to access the server using encrypted tunnels or proxies.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

This IP has been identified as running a botnet targeting our server systems with ransomware.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.