This IP belongs to PepsiCo.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

The IP attempted to send malware-infected attachments from the Postfix server.

This IP belongs to Best Buy.

The IP attempted to use the POP3 server to distribute malware.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

Unusually high number of requests to a specific service or application within the server.

The IP made multiple requests with the same X-UIDH header.

It attempted to perform a Steam protocol amplification attack on the SSH server.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

This IP belongs to the University of California, Berkeley.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

This IP belongs to Slack.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

The IP made multiple requests with the same Warning header.

It attempted command injection attacks, hoping to execute unauthorized commands.

This IP belongs to PLDT.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.