This IP has been detected spreading notorious credit card skimmers.

Multiple attempts to access the server using encrypted tunnels or proxies.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

GET /errors.log: Shows an actor trying to access server error logs.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

This IP belongs to United Parcel Service.

It attempted to login to the POP3 server with an invalid password.

This IP belongs to Citigroup.

This IP belongs to World Fuel Services.

Frequent password reset requests.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

The IP attempted to mark emails as read on the POP3 server without authorization.

The IP attempted to use the FTP server to distribute hacking tutorials.

The IP attempted to perform a downgrade attack on the SSH server.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

This particular IP tried to perform an unauthorized system configuration change.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

This IP belongs to Telus Communications.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

This IP has been observed spreading mobile malware, targeting our company application users.